PRIVACY NOTICE · VERSION 2026-08-31
Privacy Notice
This notice explains how Brandon Rofe - Entrepreneur individuel uses personal data when operating Annoying. It should be read alongside the Data Processing Terms where a business customer uploads personal data for us to process on its behalf.
Data we process
- Account data such as email address, authentication and account status.
- Billing and subscription identifiers supplied by our payment provider; Annoying does not need to store full payment-card numbers.
- Project and scope information you choose to save, which may contain names, business contact details or other personal data.
- Client change requests, approval decisions, notes and timestamps.
- Security and technical information reasonably required to protect and operate the service, such as request metadata and security logs.
- Support communications you send us.
Why we use it and lawful bases
We use account and service data to provide Annoying, authenticate users, administer subscriptions and respond to support requests where necessary to perform our contract with business users. We use limited security, fraud-prevention, service-improvement and business-administration data where necessary for our legitimate interests in operating a secure and effective SaaS business, balanced against individual rights. We process information where required to comply with legal obligations. Where consent is the appropriate basis, we will ask for it separately and it may be withdrawn.
Project material uploaded by customers
For personal data contained in project scopes, client requests and related customer-controlled material, the customer will commonly determine why that data is used and Brandon Rofe - Entrepreneur individuel processes it to provide Annoying on the customer's instructions. Customers must ensure they have an appropriate lawful basis and provide required privacy information to affected individuals. See our Data Processing Terms.
Raw file handling
The launch version reads supported uploaded files in memory to extract text and discards the raw uploaded file after extraction. If you save a project, the extracted scope text is stored with the project until deletion or the applicable retention process.
Who we share data with
We may use carefully selected service providers for hosting/database infrastructure, payments, transactional email, domain/security services and other processors necessary to operate Annoying. We disclose only what is reasonably necessary for the service. We may also disclose information where required by law, to protect legal rights or security, or as part of a business reorganisation subject to appropriate safeguards.
International transfers
Some service providers may process data outside the European Economic Area. Where EU data-protection law requires a transfer safeguard, we use an applicable lawful transfer mechanism, such as an adequacy framework or Standard Contractual Clauses, and keep provider arrangements under review.
Retention
We keep account and project data while an account is active and for a limited period afterwards where reasonably necessary for service closure, security, dispute handling, tax/accounting or legal obligations. Security and operational records are retained only as long as reasonably needed for those purposes. Customer-controlled project data will be deleted or returned in accordance with the service and Data Processing Terms, subject to lawful backup and legal-retention requirements. Operational retention is limited to what is necessary for the stated purpose. Account and active project data are retained while the account is active; contractual, billing and tax records may be retained for periods required by applicable French law; security records and backups are kept for limited operational periods. Customers may request deletion of project data, subject to legal-retention and backup-cycle requirements.
Your rights
Depending on the circumstances, individuals may have rights to access, correct, erase or restrict personal data, object to certain processing, receive portable data, or withdraw consent where consent is relied upon. Contact privacy@annoyingwork.com. We may need to verify identity. If the request concerns data controlled by one of our business customers, we may refer the request to that customer.
Automated decision-making
Annoying produces automated decision-support classifications about project scope. These outputs are intended for a business user to review and are not designed to make legal decisions about an individual or to produce similarly significant effects on an individual without human review.
Complaints
Please contact us first so we can try to resolve a concern. Individuals may also lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL) in France, or another competent EU supervisory authority where applicable.
Changes
We review this notice when our processing changes and will update the version above. Material new uses of personal data will be communicated as required before they begin.