Privacy notice

Who is responsible

Aiscéal, Dublin, Ireland, is the data controller for the personal data described here. Contact for anything in this notice, including exercising your rights: hello@aisceal.com.

What we collect, and why

Account & sign-in

Your name and email address, held in our self-hosted identity service. Used to authenticate you and to send the service emails described below. Lawful basis: performance of our contract with you.

Expert application

The profile you give us — domains of expertise, languages, availability, and any credentials you choose to submit (degree details, professional register numbers, ORCID, LinkedIn URL, an institutional email address, a CV). Used to verify your qualifications and match you to work. Lawful basis: contract (steps prior to entering one, at your request).

Verification records

The outcome of each credential review (verified/rejected, by whom, when, and the reviewer's note). Kept as an auditable record of how qualification decisions were made. Every decision except institutional-email code confirmation is made by a human. Lawful basis: contract and our legitimate interest in an honest, auditable expert network.

Work product & quality

The annotations you produce and the quality scores computed on them (inter-annotator agreement). These are the product of the paid work itself. In datasets delivered to customers you appear only under a stable pseudonym and credential class — never your name or identifiers. Lawful basis: contract.

Payment records

Amounts earned, payout status and an append-only transaction trail. When payouts are processed through a payment provider (Mollie B.V., Netherlands), the details needed to pay you are shared with them. Lawful basis: contract and legal obligations (financial record-keeping).

Enquiries & bookings

If you contact us as a customer or book a deployment: your name, organisation, contact details and the content of your enquiry. Lawful basis: steps prior to a contract, at your request.

Technical logs

Server logs (including IP addresses) and an access log of every view of stored capture data. Used for security, abuse prevention and the tamper-evidence guarantees we sell. Lawful basis: our legitimate interest in securing the service.

Where your data lives

Everything is processed and stored in the European Union: our servers are with OVHcloud (France), and service email is sent through Brevo (France). We use no United States–based processors, and we do not transfer your personal data outside the EU/EEA.

Emails we send

Service emails only: sign-in and verification emails, and notifications about your offers, work, credentials and payouts. You can switch notification categories off (or pause all non-essential email) from your account page; account-integrity messages and identity emails cannot be disabled. We send no marketing email and use no advertising trackers.

Cookies

One essential session cookie to keep you signed in (plus the equivalent on our identity service). No analytics, no advertising, no third-party cookies — which is why there is no cookie banner.

How long we keep things

Your account and profile: until you delete them. Encrypted backups: rotated on a 30-day cycle. The provenance ledger — the record of who did what to which dataset — is append-only by design, because it is the integrity guarantee our customers rely on; when you delete your account it is retained in pseudonymised form (your identifiers replaced, your CV and personal files physically deleted), on the basis of our legitimate interest in the verifiability of already-delivered work.

Your rights

You can access, correct, export or delete your data. Deletion is self-serve: your account page has an erase control that removes your personal data and physically deletes your CV, with the pseudonymised-ledger exception described above. You also have the rights to restrict or object to processing, to data portability, and to complain to a supervisory authority — in Ireland, the Data Protection Commission (dataprotection.ie). Writing to hello@aisceal.com works for all of these.

Changes

If this notice changes materially, we will note it here with a new date, and tell signed-in users through the in-app feed.