Last updated: 26 July 2026
PVDocs (pvdocs.ie) is a documentation platform for Irish solar PV installers, used to prepare SEAI Domestic Solar PV grant paperwork. It is operated by PVDOCS LIMITED, an Irish private company limited by shares (company no. 821391), which is the data controller for the installer account data described below. Contact: jack@pvdocs.ie.
Installer account data (we are the controller). When an installer company signs up we process: account email addresses, password hashes (never plain passwords), company details entered in Settings (name, address, Safe Electric registration number, signatory name and signature image), and billing records. Payments are handled by Stripe — we never see or store card numbers.
Homeowner project data (we are a processor). Installers enter details about their customers to generate grant documents: name, phone, email, address, Eircode, MPRN, BER details, and photos/documents of the installation. When a homeowner signs a document electronically we also record the signature itself along with the signing device's IP address, browser details and timestamps, kept as the e-signature audit trail alongside the signed document. The installer is the data controller for this information; we store and process it solely on their instructions to produce SEAI paperwork. Homeowners should direct access or erasure requests to their installer, who can fulfil them in the app (deleting a project permanently deletes its data and files).
Installer account data: performance of a contract (providing the service) and legitimate interest (security, fraud prevention). Homeowner data: processed under the installer's instructions per Article 28 GDPR; the installer's lawful basis is typically performance of their contract with the homeowner and the SEAI grant application process.
All application data is stored on servers in the European Union (Hetzner, Germany/Finland). We use these sub-processors:
We do not sell your data or run third-party advertising. Aside from Google Analytics and the sub-processors listed above, we do not transfer personal data outside the EU/EEA except under standard contractual clauses or the EU‑US Data Privacy Framework.
A strictly necessary session cookie keeps you logged in. We also use Google Analytics, which sets cookies to measure anonymous, aggregated website usage. We do not use any advertising cookies. You can opt out of Google Analytics using Google’s opt-out browser add-on or by blocking analytics cookies in your browser.
Data is encrypted in transit (HTTPS, HSTS). Passwords are stored as salted scrypt hashes. Access to project data is restricted to authenticated users within the owning installer company. Login attempts are rate-limited. Uploaded files are served only to authenticated members of the owning company.
Project data is retained while the installer's account is active so grant paperwork remains available; SEAI documentation may need to be retrievable for warranty and audit periods. Installers can delete a project at any time, which permanently removes its database records and uploaded files. On account closure we delete tenant data within 30 days, except billing records we must keep for tax law.
Under GDPR you may request access, rectification, erasure, restriction, portability, or object to processing. Installers (and their staff) can contact us directly; homeowners should contact their installer first, but we will assist either way. You can also lodge a complaint with the Data Protection Commission (dataprotection.ie).