Privacy Policy

Last updated: May 2026

1. Introduction

This Privacy Policy explains how repeatafterme handles your personal data when you use the platform at repeatafterme.dk and related services. For any privacy-related questions, contact hello@repeatafterme.dk. You may also lodge a complaint with the Danish supervisory authority, Datatilsynet (datatilsynet.dk).

2. Data we process

Account data: email address and full name. Your password is stored as a cryptographic hash — we never see or store the plaintext.
Workspace content: process definitions, boards, tasks, comments, attachments, and any other content you create within the service.
Access requests: name, email, and company name when you submit a request via the contact form.
Technical data: IP address, browser type, and request logs, used for authentication, security, and platform-health monitoring.

3. Why we use it (legal basis)

To provide the service and authenticate you (GDPR Art. 6(1)(b) — contract).
To send transactional emails: invitations, password resets, system alerts (Art. 6(1)(b)).
To respond to your request when you submit the contact form (Art. 6(1)(b) — pre-contractual steps at your request).
To monitor for abuse, secure the platform, and investigate incidents (Art. 6(1)(f) — legitimate interest).

We do not use your contact-form submissions for unsolicited marketing. We do not sell your personal data.

4. Where your data lives

All personal data is stored within the European Union. We do not transfer data outside the EU/EEA.

Current sub-processors:

Supabase — database, authentication, file storage. EU region (Frankfurt).
Vercel — application hosting and traffic analytics. EU region.
e-studio — outbound transactional email (SMTP). Denmark.

Data is encrypted in transit (TLS) and at rest (managed by the underlying providers). Workspaces are isolated using row-level security and strict access controls; we continuously audit these mechanisms.

5. Your rights under GDPR

You have the following rights regarding your personal data:

Access: obtain a copy of the personal data we hold about you.
Rectification: correct inaccurate or incomplete data.
Erasure: delete your account and personal data.
Restriction: limit how we process your data.
Portability: export your workspace content in a machine-readable format.
Objection: object to processing based on legitimate interest.

To exercise any of these rights, email hello@repeatafterme.dk. We respond within 30 days as required by GDPR Art. 12. If you believe your rights have been violated, you may also complain to Datatilsynet.

6. How long we keep data

Account & workspace data: retained while your account is active. When you delete your account, data is removed from active systems immediately. Backup snapshots are purged within 30 days (the standard Supabase backup retention window).
Contact-form submissions: retained until we have responded to your request, then deleted within 90 days unless we are in active correspondence with you.
Technical logs: retained for up to 30 days, longer only if needed for an active security investigation.

7. Cookies & analytics

We use essential authentication cookies only. These are strictly necessary to operate the service and do not require consent under the ePrivacy Directive. We do not use marketing, advertising, or tracking cookies. Aggregated traffic analytics are provided by Vercel Analytics, which is cookieless and does not track individual users across sites.

8. Children

repeatafterme is intended for business use. By creating an account, you confirm that you are at least 18 years old. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email at least 14 days before they take effect. Minor clarifications may be made without notice — the “Last updated” date at the top of this page reflects the most recent revision.

10. Contact

For privacy-related inquiries: hello@repeatafterme.dk.

Supervisory authority: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark.