Legal

Privacy Notice

Last updated: October 2026

This Privacy Notice explains how RTBLetter.ie ("we", "us", "our") collects, uses, and protects your personal data. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

Who We Are

RTBLetter.ie operates the website rtbletter.ie, an AI-assisted document generation service for Irish tenancy dispute letters. We are the data controller for personal data collected through this website.

For data protection queries, contact us at: our contact page or by email at help@rtbletter.ie.

What Data We Collect

Email address — provided when you purchase or contact us
Payment information — handled entirely by our payment processor (payments made up to 12 October 2026 were processed by Stripe or PayPal); we do not store your card details
Waiting-list email — if you ask us to email you when payments reopen, we keep your email address and the page you were on, on a private server we control, use them only to send you that one message, and delete them within 90 days of sending it (or sooner if you ask)
Tenancy dispute details — the information you enter to generate your letter (property address, landlord details, rent/deposit figures, dates, grounds)
Technical data — IP address, browser type, pages visited (via anonymous analytics)
Email me my preview — if you use this option, the email address you type is used once to send you one email and is not stored by us
Reviews — if you leave a review after buying: your star rating, optional comment and optional first name, with the date. We link it to your purchase only through a one-way code, never to your name, address or email

Why We Collect It (Legal Basis)

Contract performance — to generate and deliver your tenancy letter
Legitimate interest — to improve our service and prevent fraud
Legal obligation — to comply with tax and financial record-keeping requirements
Consent — for any marketing communications (you can opt out at any time)

How We Use Your Data

To generate your tenancy dispute letter
To process your payment
To respond to your queries or refund requests
To show your document on screen and let you download it as a PDF
To comply with our legal obligations

Who We Share Data With

We do not sell your personal data. We share data only with trusted service providers necessary to operate our service:

Our payment provider — payment processing (their privacy policy applies to card data); Stripe and PayPal — processed payments made up to 12 October 2026 (their privacy policies apply to those records)
Anthropic (Claude API) — to generate your letter content. Inputs are processed but not stored for training purposes under our API agreement
Vercel — website hosting
Formspree — contact form processing
Resend — delivery of the one-off preview email, only if you ask for it (the email contains a link carrying your choices, which we do not store)

International Data Transfers

To create your document we send the details you enter to our AI provider, Anthropic, which processes them on servers in the United States. Where personal data is transferred outside the EEA — to Anthropic, and where applicable our payment provider and, for earlier payments, PayPal and Stripe (payments), Vercel (hosting) and Formspree (contact form) — the transfer is protected by appropriate safeguards, namely Standard Contractual Clauses and/or the EU–US Data Privacy Framework, under each provider's data-processing terms. Anthropic does not use data submitted through its API to train its models.

How Long We Keep Your Data

Form inputs: not retained after your letter is generated (when you pay, the details you entered are held in a private store for up to 24 hours while the payment completes, then deleted)
Anonymous usage counts: we record which options people choose (for example the grounds or the council area) as simple counts, with no name, address, reference number or contact detail attached
Generated letter content: deleted within 30 days
Payment records: kept as legally required (Irish tax law — 7 years)
Contact form messages: deleted within 12 months
Email me my preview: your email address and choices are not stored by us; they exist only in the one email you request
Reviews: kept until you ask us to remove yours (contact us and we will delete it)

Your Rights Under GDPR

You have the right to: access your data · correct inaccurate data · erase your data · object to processing · data portability · withdraw consent at any time.

To exercise any right, contact us and we will respond within 30 days.

Cookies

We use only essential cookies required to operate the site. We do not use advertising or tracking cookies. No cookie consent banner is required as we do not use non-essential cookies.

Complaints

If you believe your data has been mishandled, you have the right to lodge a complaint with the Data Protection Commission (Ireland).

Changes to This Notice

We may update this notice from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the site after changes constitutes acceptance.