Privacy policy

01Data controller and contact

Legal company name: [Company input required]

Address: [Company input required]

CVR: [Company input required]

Privacy contact: William@Wimatra.dk

02Information and sources

We process names, company and contact details, email, phone, address and CVR, messages, machine requirements, customer agreements, offers and related notes. Information comes from you, staff and relevant company lookups. Uploaded images and spoken or pasted text may contain personal information; avoid sensitive or unrelated information.

Staff accounts include name, email, role, password hash and session/security information. Visitors have no customer account. With statistics consent, we record the time and version of an offer opening, linked to that offer, without visitor identity or IP in the opening record. Operations and abuse prevention process connection information such as IP addresses.

03Purposes and legal bases

We use information to respond to inquiries, find relevant machinery, administer requests and offers, communicate with customers, and operate and secure staff accounts and the system. Staff may actively use AI to extract data from selected text, speech or an image and to suggest translations.

[Company/legal review required: specify and justify the legal basis for each purpose.] Optional offer statistics and external videos are enabled only after your cookie choice. You can withdraw this consent in Cookie settings.

04External services

The system uses Neon/Postgres for the database, Resend for email, OpenAI for staff-selected AI processing, DanskCVRAPI.dk for company lookups, Sanity for editorial content and editor accounts, and Cloudflare R2/S3-compatible storage for images. YouTube/Google is contacted only after consent and playback. Hosting processes web traffic; the company must confirm the actual hosting provider.

AI receives the selected source, relevant field definitions and glossary — no automatically attached customer history, contacts or offers. Audio and images are not saved as AI logs, and new extraction logs contain operational metadata only. CVR lookups retain selected company information only; owner/person datasets are not requested and raw responses are not retained.

[The company must confirm actual providers, agreements, processing countries, any transfers and appropriate safeguards. Source code cannot establish these facts.]

05Retention

Information is retained only as long as needed for its purpose and relevant legal or business obligations. [Company/legal approval and specific periods/deletion criteria are required.]

Archiving and Trash do not by themselves permanently delete data. Controlled permanent deletion and optional Trash emptying do not establish a general retention policy. Backups, sent emails and downloaded files need separate handling. Existing history and older AI logs may contain personal information.

06Your rights

Depending on the processing, you may have rights to access, correction, deletion, restriction, objection and portability. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. Contact us using the details above. Requests are handled manually; we may request information necessary to verify your identity.

You can complain to the Danish Data Protection Agency (Datatilsynet) via datatilsynet.dk. See Cookie policy and Cookie settings for browser technologies and changing your choices.