Privacy Policy

Nobotch ApS ("Nobotch", "we", "us") is the data controller for the personal data described here.

• Nobotch ApS, CVR 46504798
• Meklenborggade 9, 2300 Copenhagen, Denmark
• Contact for data questions: privacy@nobotch.ai

• Contact details — your name, if provided, and email address.
• Assessment, resource and portal data — your assessment answers, checklist progress, and the products you configure or offers you request.
• Technical data — basic information your browser sends automatically, such as IP address, device and browser type, and analytics data.

• To provide the service you requested — sending assessment results, a resource, or a configured product offer — and to save your progress: your consent and/or performance of the service you asked for.
• To contact you about our services and how we could help you: your separate, optional consent.
• To operate, secure and improve the website: our legitimate interest in running the site.

We only contact you about our services if you actively select the optional box. The result, resource, or offer you request is not conditional on that choice.

• Assessment, resource and portal data: 12 months from your last activity, then deleted from our active systems.
• Lead and marketing contacts: until you unsubscribe or ask us to delete the data, reviewed periodically.
• Technical and analytics data: 12 months.

We do not sell your data. We share it only with providers that help us run the site and communicate with you, and only as needed to do their job.

• Namecheap for company mailboxes.
• Resend for transactional email delivery.
• Vercel for website hosting.
• Convex for application data storage and authentication.
• PostHog for product analytics.
• Formspree for routing contact and resource requests.

Some providers process data outside the EU/EEA. Resend stores customer data in the United States. Its transfers are covered by the EU Standard Contractual Clauses and its participation in the EU–US Data Privacy Framework. Where other providers transfer data outside the EU/EEA, we rely on an adequacy decision, Standard Contractual Clauses, or another valid safeguard.

Under the GDPR, you can access your data; have it corrected or deleted; restrict or object to how we use it; receive it in a portable format; and withdraw consent at any time, including through the unsubscribe link in an email. Withdrawing consent does not affect processing carried out before withdrawal. To exercise these rights, email privacy@nobotch.ai.

You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, at datatilsynet.dk.

If we change how we handle data, we will update this page and the last updated date.