Privacy Policy

Sheridan Insights is a business intelligence platform with a registered address at The Tara Building, 11–15 Tara Street, Dublin 2, D02 RY83, Ireland. We are the data controller for personal data processed through this website and platform.

For all data-related queries, contact: declan@sheridaninsights.com

To deliver the Sheridan Insights platform, we process the following categories of data on your behalf:

• Commerce data: order records, line items, product variants, and cost data from your connected commerce platform (e.g. Shopify)
• Advertising data: campaign-level spend, impressions, clicks, and conversions from connected ad platforms (e.g. Google Ads, Meta Ads). We do not process personal data from ad audiences.
• Financial data: if you connect an accounting system (e.g. Xero), we process revenue, cost, and profit data from that system
• Account data: your name, email address, and organisation details, collected when you register or contact us

We use your data solely to:

• Provide and operate the Sheridan Insights platform and your analytics dashboards
• Respond to queries you send via the contact form or email
• Send service-related communications such as billing notifications and product updates

We do not use your business data to train AI models. We do not sell your data to third parties. Your data is never used for any purpose other than delivering the service you have contracted.

We process your data under the following legal bases (GDPR Article 6):

• Contract performance: processing necessary to deliver the service you have subscribed to
• Legitimate interest: communicating with you about your account and relevant service improvements
• Legal obligation: retaining records as required under Irish law

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Restrict or object to processing
• Receive your data in a portable format
• Lodge a complaint with the Data Protection Commission at dataprotection.ie

To exercise any of these rights, email declan@sheridaninsights.com. We will respond within 30 days.

Each organisation's data is stored in a dedicated, isolated database schema — it is never shared with or accessible to other organisations. Access tokens for connected platforms are stored encrypted. All infrastructure is hosted within the EU. We apply least-privilege access principles across all systems.

OAuth access tokens and refresh tokens obtained through platform integrations (such as Shopify, Google Ads, Meta Ads, or Xero) are stored securely and encrypted, and are used solely to maintain your authorised connection to that platform. You can revoke any connected integration at any time from within the platform, which will immediately invalidate our access to your account on that platform.

We retain your data for as long as your account is active. On cancellation or written request, we will delete your processed business data within 30 days. Account records may be retained for up to 7 years where required by Irish tax and accounting law.

We use the following third-party processors to operate the platform:

• Neon — database infrastructure (EU-hosted)
• Clerk — authentication (SOC 2 certified)
• Stripe — billing and payment (PCI-DSS compliant)
• Railway — application hosting
• Anthropic — AI model provider. Your business data is sent to the AI model to generate responses. Anthropic does not use your data to train its models under our enterprise agreement.

This website uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

We will post any updates to this page and revise the date above. For material changes, we will notify you by email.

For privacy-related queries: declan@sheridaninsights.com

Sheridan Insights, The Tara Building, 11–15 Tara Street, Dublin 2, D02 RY83, Ireland