Privacy Policy

1. Who is responsible

ENGHOLT ApS, CVR 44314185, Møllegade 11A, 9000 Aalborg C, Denmark. Contact about personal data: kontakt@underskriv.nu.

We are the controller for data about senders and buyers, payments, credits, acceptance of terms, withdrawal requests, security and abuse prevention, and for the signature evidence and audit trail that we keep ourselves as documentation.

For the uploaded document and the signers' data, as long as they are used to complete the case, the sender is the controller and we are the processor. This is governed by our data processing terms (underskriv.nu/dpa).

2. What information we process

Sender and buyer: name, e-mail address, any company name and company logo, language, and whether you have confirmed your e-mail.

Signers: name, e-mail address, language and status (invited, opened, signed or declined, possibly with a reason).

Documents: the uploaded PDF, the final PDF with signature page and certificate, and the document's checksum (SHA-256).

Confirmation: one-time codes and access links are stored only as hashes. After an accepted code we remember the confirmation in the same browser for a maximum of 24 hours (see the Cookie Policy).

Purchase and payment: buyer type (private or business), company name and CVR number, billing country, amount, currency, payment status, refunds, payment disputes and Stripe references. We do not receive card details.

Audit trail and security: times of actions, hashed IP address, browser information (user agent), accepted version of the terms and consent and – for private customers – time and wording of the request for immediate delivery. Hashed IP addresses and e-mail addresses are also used to limit misuse (e.g. too many code requests).

Withdrawal: name, e-mail address, type of purchase, any reference and message from the form at /fortryd.

E-mails: which system e-mails have been sent, to which type of recipient (the e-mail address is stored as a hash), and whether delivery succeeded.

3. Purposes and legal basis

To provide the service and complete the purchase (performance of a contract, GDPR Art. 6(1)(b)).

To document signatures, keep the signature evidence and audit trail, and prevent abuse (legitimate interest, Art. 6(1)(f)).

To meet bookkeeping and consumer-law obligations (legal obligation, Art. 6(1)(c)).

As processor, we process the document and the signers' data on the sender's instructions. The sender must have a legal basis for sharing them with us.

4. Recipients and suppliers

Lovable (Lovable Cloud: hosting, database, file storage and scheduled jobs; Lovable Emails: verification, invitation and receipt e-mails) is our processor. The website runs on Lovable's hosting platform, which includes Cloudflare; technical data such as IP addresses is processed there.

Resend sends completion e-mails with the finished document and is our processor.

Stripe processes the payment, including MobilePay, Apple Pay and Link, and is an independent controller for payment processing and fraud prevention under Stripe's own terms.

The sender can see the signers' status and the finished document. The signers can see the sender's name, the document and the other signatures in the finished document.

If a supplier processes data outside the EU/EEA, this happens only on a transfer basis under GDPR Chapter V, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework. Write to kontakt@underskriv.nu to learn the specific basis.

5. Retention and deletion

General automatic deletion of documents is not yet activated. Until it is, documents are kept. Access links, codes and remembered verifications do, however, expire automatically. You can always ask for deletion at kontakt@underskriv.nu.

Once deletion is activated: uploaded and finished documents and company logos are deleted 24 hours after the case is completed, declined or cancelled, and no later than 30 days after payment if the case is not completed. Unpaid drafts are deleted when the draft expires (2 hours, or 24 hours after a verified e-mail).

Signature evidence and audit trail: when the document is deleted, we keep the evidence of the signature – the parties' names and e-mail addresses, times, the document's checksum and the audit trail with hashed IP address – but not the document itself and not browser information. The evidence is kept for 10 years from completion of the case, matching the absolute limitation period.

Payment and accounting data (amounts, dates, references, buyer type, CVR) and credit accounts are kept for 5 years from the end of the financial year to which they relate. The buyer's e-mail address is removed when the case is deleted.

Withdrawal requests and records of acceptance of terms and of requests for immediate start are kept for 5 years.

Temporary data: one-time codes and remembered verifications are deleted 7 days after expiry, abuse counters after 2 days and technical payment events after 90 days.

The database is backed up daily, and the backups are kept for up to about 14 days. Document files are not included in the backups. E-mails in recipients' inboxes are outside our control.

6. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection. Write to kontakt@underskriv.nu. You can complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).