Privacy Policy

Version 1.0 · Last updated 21 August 2026

This notice explains how Repodo Platform ApS collects and uses personal data when you visit repodo.com or join our waitlist.

1. Who we are

The data controller is Repodo Platform ApS, CVR no. 46694279, Kongens Nytorv 8, 3., 1050 Copenhagen K, Denmark.

For privacy questions, or to exercise your rights, email [email protected]. Press enquiries can go to [email protected] or +45 70 90 70 88.

Repodo Platform ApS is a subsidiary of Repodo Group ApS, CVR no. 46391756, Kongens Nytorv 8, 3., 1050 Copenhagen K, Denmark. Repodo Group ApS is a holding company and is not a controller of the personal data described here.

2. What this notice covers

This notice covers this website and the waitlist sign-up only. It does not cover the Repodo platform, which is not yet available. When the platform launches, separate terms and a separate notice will apply.

It also does not cover any processing carried out by Repodo Statsautoriseret Revisionsanpartsselskab in connection with audit engagements. That company is a separate controller for its own purposes, and a separate notice will apply to that processing.

Joining the waitlist does not create a contract, does not guarantee access to the platform, and does not commit either of us to anything. We may change the platform, its pricing, and its launch timing, and we decide who is onboarded and when.

3. The waitlist

3.1 What you give us

If you join the waitlist, you send us the information in the form: full name, work email, company name, phone number, country of company registration (Denmark, Sweden, the United Kingdom, or other), and, if you choose to give it, the accounting system you use. Everything except the accounting system is required to join. The country you select decides which language your confirmation email is written in.

We collect this from you directly. We do not buy contact data from third parties and we do not enrich your record from external sources. We do not collect special categories of personal data and we do not ask for CPR numbers.

3.2 What we use it for, and on what basis

The purpose of the waitlist is that we can reach you about Repodo as it becomes available. By ticking the box, you give your consent to receive marketing by email about Repodo and our own services. The sign-up and those emails are covered by that one consent; it is required to join the waitlist because email is how we operate it. If you provide a phone number, we may also contact you by phone in a business-to-business context about Repodo and our own services. That phone contact is based on our legitimate interests, not on your email-marketing consent. We do not make marketing calls to consumers or to anyone who has told us not to call.

That email-marketing consent covers marketing by email about Repodo and our own services only. We do not use it to send you anything unrelated, we do not use it to promote other companies or their products, and we do not pass your consent or your contact details to any other company for its own marketing, including other companies in our group.

3.3 Withdrawing your consent

You can withdraw your consent at any time and free of charge. In every marketing email we send links to your email preferences, where you can unsubscribe from any list or from all of them. To stop phone contact as well, or to have your entry deleted, email [email protected].

Withdrawing is as easy as giving consent, and it does not affect contact we already made while the consent was in place. Because the waitlist exists so that we can contact you, withdrawing your consent also means leaving the waitlist, and we delete your entry.

When we delete your entry we keep your email address on an internal suppression list only for as long as we carry out equivalent email marketing, and we review that need annually. This lets us make sure not to contact you again and prevents a later sign-up from quietly reinstating you. The basis for that limited use is our legitimate interest in honouring your choice, Article 6(1)(f) GDPR. You can ask us about this list at [email protected].

4. Visiting the website

The site is hosted by Vercel, Inc. Like most hosts, Vercel processes technical data needed to deliver pages and keep the service secure, such as IP address, browser and device information, the page requested, and the time of the request. We rely on our legitimate interest in running and protecting the site, Article 6(1)(f) GDPR. We retain the technical logs available to us for up to 30 days, unless we need them longer to investigate a security incident or meet a legal obligation.

We also use Vercel Web Analytics. It counts page views and unique visitors and shows aggregate information such as top pages, referrers, country, browser, and operating system. It does not use cookies. Visitors are distinguished with a hash of the incoming request that is discarded and reset every 24 hours, so you are not recognised from one day to the next or across other websites. The legal basis is legitimate interests, Article 6(1)(f). We retain the aggregated analytics reports for no more than 12 months.

Because that hash is short-lived and we only ever see aggregated results, we do not seek to identify individual visitors from analytics data. Where we cannot identify you from the information we process for Vercel Web Analytics, Article 11 GDPR may limit the rights we can action in relation to that data. If you provide information that enables us to identify relevant data, we will assess your request. If you would rather not be counted at all, a browser or extension that blocks analytics requests will stop it. You are welcome to write to [email protected] with any questions.

We do not use advertising networks, remarketing pixels, or cross-site tracking, and we do not use your data for profiling.

If you email us, for example at [email protected] or [email protected], we process the content of your message and your contact details in order to reply. The legal basis is our legitimate interest in handling correspondence sent to us, Article 6(1)(f) GDPR. We retain correspondence for up to 12 months after our last substantive exchange, unless a longer period is necessary to deal with a legal claim or legal obligation.

5. Cookies and local storage

This website does not set tracking cookies, and we do not show a cookie banner.

If you pin light or dark mode, we store that choice in your browser’s local storage under the key "theme". It is only used to remember your preference, it is not used to identify you, and it is never sent to us. It stays on your device until you change it or clear site data for this website.

Vercel Web Analytics is cookieless, as described in section 4. If we later add technologies that are not strictly necessary, we will update this notice and ask for your consent before they run.

6. Who we share your data with

We do not sell your personal data, and we do not share it with third parties for their own marketing.

We disclose information about you if:

• we are required to do so by law,
• it is necessary in order to take steps at your request or to perform an agreement with you,
• we have a legitimate interest in doing so, and that interest is not overridden by your interests or fundamental rights and freedoms, and/or
• you have given your consent.

Where that is the case, disclosure is made to the following categories of recipients:

• Vercel, Inc., which hosts this website and provides web analytics
• Resend, which sends our confirmation and marketing emails
• Attio Ltd., our CRM provider, where we hold waitlist entries
• Public authorities, in Denmark and in other countries where we operate, for example tax, police, law enforcement and supervisory authorities
• Our professional advisers, such as lawyers, accountants, auditors and insurers
• Other companies in the Repodo group, where their personnel carry out administrative or commercial functions on our behalf
• An acquirer or successor, if we sell or reorganise the company, in which case data would transfer only as far as that process requires and with appropriate safeguards

The waitlist form is submitted to our own API at api.repodo.com, which is operated by Repodo Platform ApS. Where a recipient handles personal data on our behalf, it does so on our instructions and under a written data processing agreement, and not as a separate controller.

7. Transfers outside the EU and EEA

Some of the providers we rely on are established in the United States or process personal data there. Vercel, Inc. provides hosting and web analytics, and Plus Five Five, Inc. (Resend) delivers our confirmation and marketing emails. Attio Ltd. provides our CRM from the United Kingdom and may use sub-processors in other countries.

Transfers to Vercel and Resend in the United States rely on their certification under the EU–US Data Privacy Framework, where applicable. Transfers to the United Kingdom rely on the European Commission’s adequacy decision. Where a transfer does not have the benefit of an adequacy decision, including relevant transfers by Attio sub-processors, we use the European Commission’s standard contractual clauses together with any additional measures the transfer requires. You can obtain a copy of the safeguards used for a specific transfer by emailing [email protected].

8. If you are outside Denmark

Our waitlist is open to business representatives in Denmark, Sweden, the United Kingdom and other countries. This notice applies to everyone who signs up, wherever they are.

We obtain consent before sending marketing emails, including where local law might permit email marketing without consent. Where local law imposes additional requirements, we assess and comply with those requirements before directing marketing to that country.

Nothing in this notice limits rights you may have under mandatory data-protection law. Where applicable law requires us to appoint a local representative, we will identify that representative in this notice.

9. How we protect your data

This website and our waitlist API are served over encrypted connections, and the form is submitted straight to our API without cookies or third-party scripts in between. Inside Repodo, access to waitlist data is limited to the people who need it for the purposes described here. The providers who handle data for us are bound by data processing agreements that require appropriate technical and organisational security measures.

10. Your rights

You have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected and incomplete data completed
• Have data erased, in the cases set out in Article 17 GDPR
• Restrict processing, in the cases set out in Article 18
• Receive the personal data you have provided to us, where we process it by automated means and on the basis of your consent or a contract, in a structured, commonly used and machine-readable format. You may ask us to transmit it directly to another controller where technically feasible.
• Object at any time, on grounds relating to your particular situation, to processing based on legitimate interests, including our server logs, analytics and business-to-business telephone contact. You may always object to direct marketing, subject to the note on analytics in section 4.
• Withdraw consent at any time, without affecting processing already carried out

To use these rights, email [email protected]. We may need to confirm your identity. We will respond within one month, unless the request is complex, in which case we may extend that period by two further months and will tell you if we do.

You also have the right to lodge a complaint with a supervisory authority. For Repodo that is the Danish Data Protection Agency, Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark, [email protected], datatilsynet.dk. If you are in the United Kingdom, you may also contact the Information Commissioner’s Office, ico.org.uk.

11. Other points

This website is not directed at children, and we do not knowingly collect personal data from anyone under 18.

We do not use your data for automated decisions that produce legal or similarly significant effects.

We have not appointed a Data Protection Officer. Based on our current processing activities, we do not consider that Article 37 GDPR requires us to do so. We review that assessment when our processing changes.

12. Changes to this notice

We may update this notice when our practices change. The version number and date at the top will change when we do. If a change is material to the waitlist or to marketing consent, we will ask again or tell you directly.

13. Contact

Repodo Platform ApS · CVR no. 46694279 · Kongens Nytorv 8, 3., 1050 Copenhagen K, Denmark · [email protected] · +45 70 90 70 88

This notice is governed by Danish law.