Personal data
Privacy policy
This privacy policy explains how information is processed on beviset.com and in Beviset.
Data controller
HverdagsAI ApS, CVR 43789023, Amagerfælledvej 106, 2300 København S, Denmark.
Information we process
- Contact and order information such as name, work email, organisation, selected plan and expected use.
- Subscription and payment status together with identifiers from Stripe. Beviset does not receive full card details.
- Technical information required for operation and security. Repeated payment attempts are limited using a salted hash of the IP address, and the raw IP address is not stored in the Beviset payment database.
- Information in issued certificates, including recipient, issuer, title, dates and the public certificate identifier. The issuing organisation decides which information is included.
Why we process the information
We use the information to respond to enquiries, enter into and perform agreements, administer subscriptions, issue and verify certificates, prevent abuse and comply with accounting and legal obligations. Processing is based on performing an agreement or taking steps before an agreement, complying with legal obligations and our legitimate interest in secure and stable operation.
Browser storage
Order information is stored temporarily in the browser sessionStorage so it can follow the order into the contact flow. The information does not leave the browser until you send an email or continue to payment. The website uses no active analytics tools or advertising pixels.
Providers and recipients
Stripe and Link process payments and subscriptions. Cloudflare provides hosting, security and the technical payment database. Our email provider processes information when you email us. Providers process information under their agreements and applicable data protection rules. Transfers outside the EU and EEA only take place under a valid transfer mechanism.
Retention
We retain information for as long as necessary for the purpose for which it was collected and for as long as required by law. Accounting records are retained under bookkeeping rules. Issued certificates and the information required for public verification are retained under the terms after a subscription has been cancelled. The issuer can contact us about revocation or correction.
Your rights
You may request access, correction, deletion, restriction or data portability and object to processing when the conditions under data protection law are met. You may complain to the Danish Data Protection Agency. Contact us first if you need help with a specific processing activity.