Privacy Notice
Last updated 7 October 2026
This notice explains what personal data Declarable collects, why, who processes it, and your rights. The controller is Agentic Atlas Ltd, 38 Fitzwilliam Street Upper, Dublin, D02 KV05, Ireland. Contact us about privacy at eamonn@agenticatlas.com.
What we collect
- Your account: your name, email address and password (stored only as a secure hash), your language and time zone, and a profile picture if you add one.
- Your shipments: the documents you upload and what we read from them, such as invoice lines, supplier and buyer names and addresses, references, values and the codes you approve. Invoices often contain the names and contact details of people at your suppliers and customers.
- Billing: your plan, its status and billing period, and your company name, address and VAT number. Card and bank details are entered on Stripe's pages and stay with Stripe; we never see or store them.
- Sample requests: the name, company, email and details you send through the form on our home page.
- Technical data: server logs with your IP address, browser and the pages requested, used to run and secure the service.
Why we use it, and on what basis
- To provide the service you signed up for: your account, reading and classifying your shipments, and billing (performance of our contract with you).
- To keep the service secure, fix faults and answer your questions (our legitimate interests).
- To keep accounting and tax records (legal obligation).
We do not sell personal data, use it for advertising, or use your documents to train AI models.
Who processes it for us
- Google Cloud hosts the service, its database and your uploaded documents, in the United States (us-east4).
- Anthropic provides the AI models that read your documents and propose classifications. Your documents are sent to Anthropic's API for this, in the United States, and are not used to train its models.
- Stripe processes payments, subscriptions and invoices.
These providers act on our instructions under data processing agreements. Where data is transferred outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long we keep it
- Account and shipment data: while your account is open. When you close your account we delete it, including your documents, within 30 days, apart from backups, which expire on their own schedule.
- Billing records: six years after the end of the financial year they relate to, as Irish law requires.
- Server logs: up to 30 days.
Cookies
We use only the cookies the service needs to work: one to keep you signed in, one to protect forms against cross-site request forgery, and one to remember your language. We do not use analytics or advertising cookies. Stripe's checkout and billing pages set their own cookies, described in Stripe's privacy policy.
Your rights
You can ask us for a copy of your personal data, to correct or delete it, to restrict or object to how we use it, or to receive it in a portable form. Email eamonn@agenticatlas.com and we will reply within one month. If you are not satisfied, you can complain to the Data Protection Commission in Ireland (dataprotection.ie) or to the supervisory authority where you live or work.
If your invoices contain data about people at your suppliers or customers, you are responsible for having a lawful basis to share it with us; we process it only to provide the service to you.
Changes
We will update this notice when how we handle data changes, and tell account holders about significant changes by email.