Privacy Policy

Last updated: 6 May 2026

PubSet ("we", "us") is operated by Techset Computers in Ireland. This policy explains what we collect, why we collect it, and the choices you have. We try to keep this short and plain.

What we collect

• Account data — name, email, role, the tenant (pub) you belong to, and a salted password hash. Set when you sign up or are invited.
• Operational data you put into PubSet — rosters, timesheets, stock counts, deliveries, cash book entries, incidents, attendance events. This is the data your business runs on.
• Location data — when you clock in or out at a venue with geofencing enabled, we record the GPS coordinates and accuracy reported by your browser, only at that moment. We do not track your location at any other time.
• Usage logs — request timestamps, endpoints hit, error traces. Used to keep the service running and to diagnose problems.

How we use it

• To run the features you signed up for.
• To enforce access controls (the right people see the right data).
• To diagnose issues, prevent abuse, and meet legal obligations (e.g. revenue and HSA records you may need to keep).
• To send you transactional email — verification, password reset, invitations, billing. We do not send marketing email without your consent.

Where it lives

PubSet runs on Microsoft Azure data centres in the EU (West Europe region). Email delivery uses SendGrid (US-based; covered by Standard Contractual Clauses).

Sharing

We do not sell your data. We share data with sub-processors strictly to deliver the service (Azure for hosting and database, SendGrid for email, Cloudflare for DNS and edge protection), and with authorities if compelled by law. Within your tenant, your colleagues see what your role permits — that's how the product works.

Retention

Operational data is retained for as long as your account is active. If you cancel, we keep your data for 30 days to allow re-activation, then delete it on request. Records that you may be legally required to retain (e.g. HACCP delivery logs, payroll-relevant attendance) can be exported as CSV at any time before deletion.

Your rights

Under GDPR you have the right to access your personal data, correct it, port it, or have it erased. To exercise any of these, email hello@pubset.app from the address on your account. We respond within 30 days.

You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) if you believe we've mishandled your data.

Cookies

We use a single first-party cookie / localStorage entry to keep you signed in. We do not use third-party advertising or tracking cookies.

Changes

If we update this policy materially, we'll let you know in-app or by email. Minor edits (clarifications, typos) we just update here with a new "last updated" date.

Contact

Questions? hello@pubset.app.

This is a plain-language summary intended to be readable. Nothing here overrides the terms of your subscription contract or your statutory rights under Irish or EU law.