Privacy notice
Last updated: 20 October 2026
This notice explains what personal data Gansey collects through this website, why, and what rights you have under the EU General Data Protection Regulation (GDPR).
Who is responsible for your data
Gansey is run by Brian O’Sullivan, who is the data controller for the personal data described here. For any privacy question or request, email brian@gansey.ai.
What we collect
- When you book a blueprint: your name, work email, company, team size, the tools you use, and the description of the process you want to improve.
- When you join the waitlist: your name, work email and, if you choose, a note about what you would use Gansey for.
- When you email us: whatever you include in the message.
- When you visit the site: our hosting provider processes technical data such as your IP address and browser type to deliver the page and protect it from abuse.
We only need a description of your process, never your real records. Please leave out customer data, personal details of colleagues and anything confidential.
Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Replying to a blueprint request, preparing the blueprint and arranging the call | Steps taken at your request before a contract, and performing that contract (6(1)(b)) |
| Writing to you when the Gansey app opens (waitlist) | Your consent (6(1)(a)), which you can withdraw at any time |
| Keeping the website secure and working | Our legitimate interest in running a safe website (6(1)(f)) |
| Keeping invoices and accounting records, once you become a client | Legal obligation (6(1)(c)) |
We never use your data to train AI models, and we never sell it. If we use an AI service to help prepare your blueprint, we use one whose terms rule out training on customer data.
Who processes it for us
We use a small number of service providers, each bound by a data processing agreement:
- Cloudflare: website hosting and security.
- [Form provider]: receives form submissions and forwards them to us.
- Proton: email.
- Google Fonts: this site loads its fonts from Google, so your browser connects to Google’s servers, which receive your IP address.
Some of these providers may process data outside the European Economic Area. Where that happens, the transfer is covered by an EU adequacy decision (such as the EU–US Data Privacy Framework) or by the European Commission’s Standard Contractual Clauses.
How long we keep it
- Blueprint requests and related emails: up to 24 months after our last contact, unless you become a client.
- Client records and invoices: as long as tax law requires.
- Waitlist details: until the app opens and we have written to you, or until you ask us to remove you, whichever comes first.
Cookies
This website does not set cookies and does not use analytics or advertising trackers. If that changes, we will update this notice and ask for your consent where the law requires it.
Your rights
You can ask us to:
- show you the personal data we hold about you, and give you a copy;
- correct it if it is wrong;
- delete it;
- restrict or object to how we use it;
- send it to you or another provider in a portable format.
Where we rely on your consent, you can withdraw it at any time; this does not affect anything we did before. Email brian@gansey.ai and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the data protection authority in the EU country where you live or work, for example the Data Protection Commission in Ireland or the Garante per la protezione dei dati personali in Italy.
Changes to this notice
If we change how we handle personal data, we will update this page and the date at the top.