Privacy

What goDocket holds, who else can see it, and what you can ask us to do about it.

Last updated 13 September 2026

Who we are

goDocket is run by Sean Cournane on behalf of goDocket.ie. If you have a question about anything on this page, or want to exercise any of the rights below, email support@godocket.ie.

There are two different relationships here, and it is worth being clear about both. For your own account — your name, your email, your business details — we decide how that information is used, so we are the data controller. For everything you put into goDocket about your customers, you are the controller and we are only handling it on your instructions. Your customers' details are yours. We do not market to them, sell them, or use them for anything other than running goDocket for you.

What we hold

  • Your account: business name, email address, and your login.
  • Your business details: address, phone, VAT number, bank details and logo, where you have entered them, because they appear on your invoices.
  • Your records: invoices with their payments, credit notes and refunds, quotes, repeating invoices, receipts, expenses, takings, customers, diary bookings and imported bank transactions.
  • How goDocket is used — which features, how often. This is counted so we know what to build and what to charge for. It is not sold to anyone.

Receipts and bank statements

These are the most sensitive things you can hand us, so they are worth describing exactly rather than in general terms.

A bank statement you upload is not kept. It is sent over an encrypted connection to be read, the transaction lines are pulled out of it, and the file itself is discarded. It is never written to disk, never stored, and never logged. What stays afterwards is only the date, description and amount of each transaction — not the statement, not the balances, and not your account number or sort code, which goDocket does not ask for and does not read.

A receipt you photograph is kept, because it is the evidence behind a VAT claim and you may need to produce it. It is stored privately and is only ever reachable by you.

Why we are allowed to hold it

Mostly because you asked us to: we cannot run bookkeeping software for you without holding your bookkeeping. In data protection terms that is performance of our contract with you.

We also rely on our legitimate interests for a narrow set of things — keeping goDocket secure, preventing abuse, fixing faults, and counting feature usage so we know what the product should be.

Who else touches it

goDocket is built on other people's services, and some of your data passes through them. They act only on our instructions and cannot use your data for their own purposes.

Google (Firebase)Hosts goDocket, stores your data, and handles signing in.EU and United States
AnthropicReads receipts and bank statements you upload, to turn them into figures. Nothing you upload is kept after it has been read.United States
ResendDelivers the invoices, quotes, receipts, credit notes, reminders and diary messages you send by email.United States
StripeTakes card payments from your customers, where you have turned that on.EU and United States

Some of these are based in the United States, so your data is transferred outside the European Economic Area. Those transfers are made under the safeguards the law provides for — standard contractual clauses, or an adequacy decision where one applies.

How long we keep it

For as long as your account is open. If you close your account we delete your data within 30 days.

Export anything you need before you close it. Revenue expects you to be able to produce your records for six years, and after we delete them we cannot get them back for you. goDocket can export your transactions, VAT summary and receipts as a single file at any time.

What you can ask us to do

You can ask us to show you what we hold, correct it, delete it, or hand it over in a form you can take elsewhere. You can also object to us using it, or ask us to restrict what we do with it. Email support@godocket.ie and we will come back to you within a month.

If you think we have handled your data badly, you are entitled to complain to the Irish Data Protection Commission at dataprotection.ie. We would rather you told us first, but that is your right and not conditional on it.

Keeping it safe

Your data travels encrypted and is stored encrypted. Access is enforced at the database itself, not just in the app: the rules that decide who can read a record are written so that one company can only ever reach its own, and they are tested against the live database rather than assumed to work.

No system is perfect. If your data is ever caught up in a breach that puts you at real risk, we will tell you, and we will tell the Data Protection Commission within 72 hours of becoming aware of it.

Changes

If we change how any of this works we will update this page and, where the change actually affects you, tell you in the app. See also our terms of service.