Privacy Policy

Bullet is your all-in-one solution for invoicing, VAT, payroll, and accounting. Free up your time, stay compliant, and grow.

Last updated: October 28, 2026

This Privacy Notice for Gleman Software Development Ltd (doing business as Bullet) (‘we‘, ‘us‘, or ‘our‘), describes how and why we might access, collect, store, use, and/or share (‘process‘) your personal information when you use our services (‘Services‘), including when you:

Visit our website at https://www.bullethq.ie, or any website of ours that links to this Privacy Notice
Use the Bullet app on the web (app.bullethq.ie) or on your phone
Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at help@bullethq.com.

Summary of key points

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.

Do we process any sensitive personal information? We do not ask for sensitive personal information. If you connect your Google account, Bullet reads the emails needed for the features you use: finding invoices, bills and receipts, seeing when you last chased an unpaid invoice, answering your questions about a client, and reviewing how a project went from the emails with that client. If you choose to send an email from your own address, Bullet sends only that one email, after you press Send. A message we read could happen to contain sensitive information. We use it only for the feature you are using, never for anything else, and you can disconnect at any time. Learn more in “Information we receive from your Google account”.

Do we collect any information from third parties? Yes, but only where you connect an account yourself or ask us to look something up. If you connect your Google account, we receive the emails needed for the features you use. If you connect your bank, we receive your bank transactions from our open banking provider. When you set up your company, we look up your company’s public record at the Companies Registration Office (CRO). If you link Bullet to Revenue as your tax agent, we receive your tax registration details from Revenue. We may show the public profile picture linked to your email address (Gravatar or your Google account). We do not buy personal information from data brokers.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information.

How do we keep your information safe? We have adequate organisational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.

How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what we do with any information we collect? Review the Privacy Notice in full.

1. What information do we collect?
2. How we use artificial intelligence
3. How do we process your information?
4. What legal bases do we rely on to process your information?
5. When and with whom do we share your personal information?
6. Do we use cookies and other tracking technologies?
7. Is your information transferred internationally?
8. How long do we keep your information?
9. How do we keep your information safe?
10. Do we collect information from minors?
11. What are your privacy rights?
12. Controls for Do-Not-Track features
13. Do we make updates to this notice?
14. How can you contact us about this notice?
15. How can you review, update, or delete the data we collect from you?

1. What information do we collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

names, email addresses, phone numbers and postal addresses (your business address, and your home address if you use it for mileage claims)
usernames and passwords
your business details: company name, CRO number, VAT number, tax registrations and tax returns
your financial records: invoices, bills, receipts, bank transactions, payments and the documents you upload or email to Bullet
payroll details for you and your employees: names, PPS numbers, pay, tax credits, pension and expense claims
details of your clients and suppliers that you add, such as names, email addresses and what you invoice them
debit/credit card details (handled by our payment processor, see section 5)
voice recordings, if you use the microphone to ask Bullet a question (see “How we use artificial intelligence”)
messages you send our support team, including any screen recording you choose to make in the support chat
job notes you record: the audio of a meeting you choose to record is sent in pieces to be written up, and the write-up is kept on that client’s job notes

Sensitive Information. We do not ask for sensitive personal information. Payroll needs your employees’ PPS numbers and pay details; we use these only to run payroll and file with Revenue. If you connect your Google account, see “Information we receive from your Google account” for exactly what we read and why.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information, such as your Internet Protocol (IP) address and/or browser and device characteristics, is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Notice: https://www.bullethq.ie/cookie-policy/.

The information we collect includes:

Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called ‘crash dumps’ ), and hardware settings).

Session recordings. To find and fix problems, we record how the Bullet app is used: the pages you open, where you click and scroll, and what you type. Card numbers, bank account numbers and passwords are hidden in the browser before anything is recorded, and content that comes from your Gmail is never recorded. Only the Bullet team can watch these recordings. We keep them only as long as we need them to improve Bullet, and you can ask us to delete yours at any time.

User testing. If you agree to take part in a test of Bullet, we also record your screen, your face and your voice for that test only, after asking your permission on screen. Only the Bullet team sees these recordings, and we use them only to learn how people use Bullet and make it better. You can ask us to delete yours at any time.

Proposals you send. When your client opens a proposal you sent them from Bullet, we record how they read it (which parts they read, for how long, and their scrolling), so we can show you how it was read. We do not set cookies or store anything in your client’s browser to do this, and nothing they type is recorded.

Your phone’s own calendar. The Bullet Business app on your iPhone or Android phone reads the calendar on your phone, on the phone itself, for the same meeting reminder. It never changes your calendar.

Phone calls. The app notices only that a call ended and how long it lasted, so it can ask whether the call was with a client. It never records calls and never reads who called.

Information we receive from your Google account

In Short: You can sign in with Google, and you can connect your Gmail. Bullet reads only the emails needed for the features you use, keeps no copy of your mailbox, and you can disconnect at any time.

Signing in with Google. If you sign in with Google, Google gives us your name, email address and profile picture (openid, email and profile). We use them to create your account and show who is signed in.

Connecting your Gmail. Connecting Gmail is optional. Google shows you exactly what Bullet is asking for, and you choose whether to allow it. Bullet asks for:

Permission to read your Gmail (gmail.readonly), when you connect Gmail.
Permission to send email for you (gmail.send), only the first time you choose to send an email from your own address.
Permission to see your Google Calendar events (calendar.events.readonly), when you turn on meeting reminders.
Permission to add events to your Google Calendar (calendar.events), only the first time you choose to add a meeting to your calendar.

Bullet cannot delete or change anything in your mailbox, never changes or deletes your existing calendar events, and cannot access your Google Drive or Contacts.

What we use it for. We use your Gmail only for these features:

Finding your paperwork. We search for emails and attachments that look like invoices, bills, receipts and statements, read the details (supplier, date, amount, VAT), and show you what we found. Nothing is added to your accounts unless you choose it.
Chasing payments. When you ask about a client, we look at the emails between you and that client, for example to show when you last chased an unpaid invoice.
Answering your questions in the Ask box. When you ask about a client or supplier already in your books, Bullet reads the subject, date and start of your emails with them from the last 2 years, to answer.
Preparing a proposal. Bullet reads your emails with that client, so the proposal matches what you discussed.
Bullet Personal. If you connect Gmail in Bullet Personal, Bullet finds the receipts you were emailed and the emails from revenue.ie in that tax year, for your personal tax return. For the revenue.ie emails it reads only the sender, subject and date.
Reviewing your projects. For each project, Bullet reads the emails between you and that client, only from 45 days before the project starts until 60 days after it finishes, to tell you how the project went, what went wrong and what to change next time. Bullet does this by itself once a day after you connect Gmail. You can stop it for any client, or disconnect Gmail, at any time.
Sending emails. When you press Send on an email in Bullet (a proposal, an invoice, a payment reminder or a reply that Bullet wrote for you), Bullet sends that one email from your own address to the one address shown. You see the whole email first. Bullet never sends anything you have not seen, never in bulk and never on its own.

Every search is built by Bullet’s servers for one of these purposes. Bullet never scans your whole mailbox for any other reason.

Artificial intelligence. Anthropic reads the text of the emails needed to write your project reviews, prepare your proposals and answer your questions in the Ask box. To read the details of a receipt or invoice, Bullet uses Amazon Textract. These providers act only on our instructions, do not keep the text to use for themselves, and do not use it to train their AI models.

What we store. We store an encrypted access token so the connection keeps working, the email address of the mailbox you connected, the documents and details you choose to add to your accounts, and the short project review we write for you (numbers and short summaries). We do not keep a copy of your emails.

Who sees it. No one at Bullet reads your email. Our staff look at Gmail data only if you ask us to help you with something, to investigate a security problem, or where the law requires it. Content from your Gmail is never included in our session recordings, analytics or advertising tools. We do not sell it, we do not use it for advertising, and we do not use it to train generalised artificial intelligence or machine learning models, ours or anyone else’s.

Turning it off. You can disconnect Gmail at any time in Bullet (Settings, Connected emails), or remove Bullet’s access in your Google account at myaccount.google.com/permissions. When you do, we delete the stored token and stop reading your mailbox straight away. Records you chose to add to your accounts stay, because they are part of your accounting records. You can also ask us to delete the project reviews.

Google Calendar. If you turn on meeting reminders, Bullet reads the times, titles, places, video links and guests of the events on your main calendar for the next 2 weeks. It never reads the event description or attachments. Bullet uses them to remind you to record your notes from a meeting with a client, to ask which client a call was with, and to answer your questions about your meetings. If you choose to add a meeting to your calendar (for example a call with a client), Bullet shows you the meeting first and adds that one event only when you press Add. Bullet never changes or deletes your other events and keeps no copy of your calendar. We do not sell this information, we do not use it for advertising, and we do not use it to train general AI models.

Google’s rules. Bullet’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Information about other people that you put into Bullet

When you add your employees, clients or suppliers to Bullet, or run payroll, Bullet processes their information on your behalf, so you can run your business. For that information, you are the controller and we are your processor. We use it only to provide the Services to you.

2. How we use artificial intelligence

In Short: Some Bullet features use AI to answer your questions and write for you. The AI providers we use do not train their models on your data.

Bullet uses AI for these features:

Answering your questions about your business in the Ask box. We send the AI the figures needed to answer, with names, PPS numbers and bank account numbers taken out.
Understanding what you say when you use the microphone. The recording of your voice is sent to OpenAI to turn it into text. We do not keep the recording.
Writing and checking proposals, and reading a proposal you upload.
Reading the emails needed to write your project reviews, prepare your proposals and answer your questions in the Ask box (see “Information we receive from your Google account”).
Reading receipts, bills and invoices (Amazon Textract).

Our AI providers are Anthropic (Claude), OpenAI and Amazon Web Services. They process the data only to give you the answer, act on our instructions, and under their business terms do not use it to train their models. AI suggestions are always shown to you to check. Bullet does not use AI to make decisions that have legal or similarly significant effects on you.

3. How do we process your information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.

To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
To provide the Gmail features you turn on. Where you connect your Google account, we use your mailbox only for the features described in “Information we receive from your Google account”: finding your paperwork, chasing payments, reviewing your projects, preparing proposals, answering your questions in Ask, finding receipts and Revenue emails for your personal tax return, and sending the emails you choose to send.
To file and register with Revenue and the CRO for you, where you ask us to.
To fix problems and improve the Services, using session recordings and usage data.
To answer your questions with AI, as described in “How we use artificial intelligence”.
To remind you about your client meetings. Where you connect your Google Calendar or allow the app to read your phone’s calendar, we use your upcoming meetings only to remind you to record your notes, to link a call to the right client, and to add the meetings you choose to your calendar.

4. What legal bases do we rely on to process your information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e. legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfil our contractual obligations, to protect your rights, or to fulfil our legitimate business interests.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

Consent. We may process your information if you have given us permission (i.e. consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.
Performance of a Contract. We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
Legitimate Interests. We may process your information where it is necessary for our legitimate business interests and those interests are not outweighed by your interests and rights. For example: recording how the app is used so we can find and fix problems, keeping the Services secure, and understanding which features are used. You can object to this at any time by contacting us.
Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

5. When and with whom do we share your personal information?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

Service providers. We share personal information with third parties that perform services for us and on our behalf, and only to the extent they need it to do so. These providers act on our instructions and are not permitted to use your information for their own purposes. They fall into the following categories:
- Cloud hosting and infrastructure: Amazon Web Services, Europe (Ireland) region, who store and run the Services and our databases; and Vercel, who run the Bullet web app in their Dublin (Ireland) region.
- Document reading: Amazon Textract (Amazon Web Services, Europe (Ireland) region), who read the text of receipts, bills and invoices.
- Artificial intelligence: Anthropic (United States) and OpenAI (United States), as described in ‘How we use artificial intelligence’.
- Open banking: our open banking provider, who connects your bank account when you choose to, and sends us your transactions.
- Maps and addresses: Google Maps Platform, who find addresses and work out distances for mileage claims. We send the address or places you type.
- Profile pictures: Gravatar (Automattic), to show the picture linked to an email address. We send a scrambled code made from the email address, never the address itself.
- Payment processing, who take payment for your subscription. Card details are handled by the payment processor.
- Email delivery, who send the emails Bullet sends for you, such as invoices and reminders.
- Customer support, session recordings and product analytics: our own support system, which runs on our cloud providers, holds your support messages, screen recordings you make in the support chat, session recordings and test recordings.
- Website analytics, as described in ‘Do we use cookies and other tracking technologies?’ below.
Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Legal obligations and safety. We may disclose your information where we are legally required to do so in order to comply with applicable law, a governmental request, a judicial proceeding, a court order, or legal process, or where disclosure is necessary to protect our rights, your safety or the safety of others, or to investigate fraud.

Government bodies. We send information to Revenue and the Companies Registration Office when you ask us to file, register or look something up for you.

Information from your connected Google account is treated differently. We do not share it with any third party for that third party’s own purposes. We do not sell it, use it for advertising, or use it to train generalised AI or machine learning models. Only two providers process it, on our instructions and for no other purpose: Anthropic reads the text of the emails needed to write your project reviews, prepare your proposals and answer your questions in the Ask box, and Amazon Textract reads the details of documents you choose to add (in Amazon’s Europe (Ireland) region). Neither uses your data to improve its own services or train its models.

6. Do we use cookies and other tracking technologies?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to send abandoned shopping cart reminders (depending on your communication preferences). The third parties and service providers use their technology to provide advertising about products and services tailored to your interests which may appear either on our Services or on other websites.

Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice: https://www.bullethq.ie/cookie-policy/.

Google Analytics

We may share your information with Google Analytics to track and analyse the use of the Services. The Google Analytics Advertising Features that we may use include: Google Analytics Demographics and Interests Reporting. To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. You can opt out of Google Analytics Advertising Features through Ads Settings and Ad Settings for mobile apps. Other opt out means include http://optout.networkadvertising.org/ and http://www.networkadvertising.org/mobile-choice. For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.

We do not permit third-party advertising or analytics technologies to run on the screens where information from your connected Google account is displayed, and our own session recordings never capture that information.

7. Is your information transferred internationally?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in Ireland. Regardless of your location, please be aware that your information may be transferred to, stored by, and processed by us in our facilities and in the facilities of the third parties with whom we may share your personal information (see “When and with whom do we share your personal information?” above), including facilities in Ireland, the United States, and other countries. In particular, our AI providers, Anthropic and OpenAI, process data in the United States. We protect these transfers with the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.

If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law.

European Commission’s Standard Contractual Clauses:

We have implemented measures to protect your personal information, including by using the European Commission’s Standard Contractual Clauses for transfers of personal information between our group companies and between us and our third-party providers. These clauses require all recipients to protect all personal information that they process originating from the EEA or UK in accordance with European data protection laws and regulations. Our Standard Contractual Clauses can be provided upon request. We have implemented similar appropriate safeguards with our third-party service providers and partners and further details can be provided upon request.

8. How long do we keep your information?

In Short: We keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless otherwise required by law.

Your accounting records. Irish law requires every business to keep its accounting and tax records for at least six years:

Revenue: section 886 of the Taxes Consolidation Act 1997 requires records to be kept for six years after the transactions they relate to, and for longer if Revenue starts an inquiry, audit, claim or appeal within that time, until it is finished.
Companies Registration Office: section 285 of the Companies Act 2014 requires a company to keep its accounting records for at least six years after the end of the financial year they relate to.

Because Bullet keeps these records for you, we keep your invoices, bills, receipts, bank transactions, payroll records and tax returns for six years after the end of the financial year they belong to, even if you close your account, so that you can meet these legal obligations. You can download them at any time. After six years we delete them, unless Revenue has an inquiry, audit, claim or appeal still open, in which case we keep them until it is finished.

Everything else. We keep your account and contact details while your account is open, and for up to 24 months after it closes, unless the law requires us to keep them longer.

Recordings. Session recordings and test recordings are kept only as long as we need them to improve Bullet. You can ask us to delete yours at any time. Screen recordings you add to a support chat are kept with that conversation. Voice recordings from the microphone are not kept after they are turned into text.

Your Gmail. Project reviews made from your emails are kept with the project until you delete the project or ask us to delete them.

An exception applies where you have connected your Google account: the encrypted access token we store to maintain that connection is deleted immediately when you disconnect your Google account or revoke Bullet’s access, not at the end of the retention period above.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

9. How do we keep your information safe?

In Short: We aim to protect your personal information through a system of organisational and technical security measures.

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

If you connect your Google account, the access token that allows Bullet to read your Gmail messages is encrypted at rest, and access to it is restricted in the same way as our most sensitive credentials. The contents of your mailbox are excluded from our application logs and error reporting.

The access token for your Gmail is encrypted with a key held in Amazon’s Europe (Ireland) region, and only the part of our system that reads Gmail can use it. No one at Bullet holds a copy of it.

10. Do we collect information from minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at help@bullethq.com.

11. What are your privacy rights?

In Short: In some regions, such as the European Economic Area (EEA), United Kingdom (UK), and Switzerland, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

In some regions (like the EEA, UK, and Switzerland), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us by using the contact details provided in the section “How can you contact us about this notice?” below. We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section ‘HOW CAN YOU CONTACT US ABOUT THIS NOTICE?‘ below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:

Where you have connected your Google account, you can withdraw that permission on its own at any time by disconnecting the account in Bullet or by revoking Bullet’s access at myaccount.google.com/permissions, without affecting the rest of your account.

You can turn off session recording for your account by contacting us.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services. For further information, please see our Cookie Notice: https://www.bullethq.ie/cookie-policy/.

If you have questions or comments about your privacy rights, you may email us at help@bullethq.com.

12. Controls for Do-Not-Track features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (‘DNT’) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

13. Do we make updates to this notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated ‘Revised’ date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

14. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at help@bullethq.com or contact us by post at:

Gleman Software Development Ltd

9 Meath St, The Liberties, Dublin 8, D08 H275, Ireland

Dublin, County Dublin D08 H275

Ireland

15. How can you review, update, or delete the data we collect from you?

You have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. We keep accounting and tax records for six years after the end of the financial year, as the Companies Act 2014 and Revenue require, so we cannot delete those before then. To request to review, update, or delete your personal information, please email us a data subject access request.

Click here to check the whole document on the Privacy Policy.