GDPR & Data Protection

Effective Date: January 30, 2026

Islandbridge Automation Limited is an Irish company, and we are committed to compliance with the General Data Protection Regulation (GDPR). We take an "EU-First" approach to data privacy.

Role of Islandbridge Automation

• Data Controller: For your account information (your name, email, billing details), Islandbridge Automation Limited acts as the Data Controller.
• Data Processor: For the financial documents and data you upload to our platform (invoices, receipts), Islandbridge Automation Limited acts as the Data Processor on your behalf. You remain the Controller of this data.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can correct inaccurate or incomplete data via your account settings.
• Right to Erasure ("Right to be Forgotten"): You can request the deletion of your account and all associated data.
• Right to Data Portability: You can export your data from our platform.

Subprocessors

To provide our services, we use the following third-party subprocessors. We have Data Processing Agreements (DPAs) in place with these providers to ensure the protection of your data.

Subprocessor	Purpose	Location
Supabase	Database & File Storage	EU (AWS Ireland/Germany)
Vercel	Web Hosting & Edge Functions	Global (EU CDNs)
Xero	Accounting Integration (Optional)	Global

Data Deletion Requests

To exercise your Right to Erasure or request the deletion of specific data, please contact our Data Protection Officer at:

Email: info@islandbridge.io
Subject: GDPR Data Deletion Request

We aim to process all valid requests within 30 days.