GAFFER PRICE

Privacy & Data Protection

YOUR DATA, YOUR BUSINESS

Gaffer Price is built for working tradespeople. Your job records, customer details, photos and documents belong to you. This page explains, in plain terms, what we store, how we protect it and what control you have.

Last updated: September 2026

Who we are

  • Gaffer Price is a trading name of Tartan Paint Software Ltd, registered in England & Wales, company number 17445531.
  • Tartan Paint Software Ltd is the data controller for the information processed through Gaffer Price. You can contact us about any data matter via the email address shown on your account.

What data we hold

  • Account details — your name, email address and business profile (business name, trade, region, rates, VAT details) that you enter during set-up.
  • Business records you create — customers, jobs, estimates, quotes, invoices, notes, photos, voice recordings and uploaded templates.
  • AI interactions — voice transcriptions and the structured estimates and suggestions produced by Dave (our AI assistant) so you can review and correct them.
  • We do not collect or store payment card details, and we do not sell or share your data with third parties for marketing.

How your data is protected

  • Every business's data is isolated. Database access is controlled by row-level security, meaning records can only be read or changed by the authenticated account that owns them.
  • Access requires sign-in with your email credentials. There is no public or anonymous access to your customers, jobs, documents or media.
  • Photos, voice recordings and uploaded templates are stored in private, access-controlled storage — not publicly accessible folders.
  • All traffic between your device and the service runs over encrypted HTTPS connections.
  • Sign-in sessions are short-lived and refreshed securely; signing out ends access from that device.

How AI (Dave) uses your data

  • When you use voice-to-quote, estimate suggestions, estimate review or AI mock-ups, the relevant job description, transcription or photo is processed by AI models to produce a result for you.
  • AI learning that improves estimates is based on structured job data (trade, materials, labour, outcomes) — never on customer names, addresses or contact details.
  • AI features only run when you ask for them. Nothing in your account is sent for AI processing without you triggering it.

Your responsibilities as a business

  • Customer details you store (names, addresses, phone numbers) are your business's data. Gaffer Price acts as a tool for you to manage them.
  • You should only store customer information you need for your work, and tell your customers you keep job records digitally.
  • Use a strong, unique password for your account and sign out on shared devices.

Payments, sharing and retention

  • Payments are handled by Paddle.com Market Ltd, our Merchant of Record. Paddle collects and processes your billing details, handles subscriptions, tax compliance and invoicing, and acts as a separate data controller for that information.
  • We also share limited data with service providers who help us run Gaffer Price — cloud hosting and database providers, AI processing providers, analytics tooling — and with professional advisers or authorities where the law requires it.
  • We rely on performance of our contract with you (running your account), our legitimate interests (security, fraud prevention, improving the product), your consent (optional analytics and marketing) and legal obligations (accounting and tax records).
  • We keep your account and business records while your account is active and for a reasonable period afterwards, then delete or anonymise them. Financial records are kept for as long as UK tax law requires.
  • Our servers and providers may process data outside the UK/EEA. Where that happens we rely on adequacy decisions or standard contractual clauses to protect your information.
  • We use essential cookies to keep you signed in and analytics cookies to understand how the app is used. You can clear or block cookies in your browser; blocking essential cookies will stop sign-in working.

Your rights and choices

  • You can view and edit your business, customer and job data at any time inside the app.
  • You can delete customers, jobs, photos, notes and documents yourself from within the app.
  • You can request a full export or deletion of your account and all associated data by contacting us.
  • Under UK GDPR you have the right to access, correct, erase, restrict or object to processing of your data, to data portability, and to withdraw consent. We respond within one month, and you can complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with our response.

Contact

  • For any privacy question, data access or deletion request, use the contact form on the Contact page or the support option inside the app. Our replies are sent from hello@notify.gafferprice.com.
  • We aim to respond to data requests within 30 days.

This policy may be updated as the product evolves. Material changes will be highlighted in the app.