Privacy policy

Just a Sign ApS
Østre Alle 28
DK-4200 Slagelse
Denmark
Company and VAT number: DK46605144 (CVR)
Email: hej@justasign.ai
Phone: +45 82 82 30 84

If you have any questions about how we process your data, please write to us.

• We use your data to design, sell and deliver your sign — and not for anything else without your consent.
• What you write in the chat is processed by our AI providers so that the AI can reply to you. So please do not write sensitive information in the chat, for example about your health or finances.
• We never sell your data.
• We only use statistics and marketing cookies if you say yes.

When you design a sign in the chat

We process what you write, the choices you make and the sign designs we create for you. Your browser is given a random session ID so that you can return to your conversations. We use this data to design and price your sign and to find errors and improve the service. Messages and requests for drawings may be checked automatically for illegal or offensive content.

The chat is an AI. It suggests sign designs, but it does not make any decisions about you that have legal effects for you or similarly significantly affect you. If you share the link to a conversation, anyone with the link can see the conversation.

Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in running and improving the service (Article 6(1)(f)).

When you buy

We process your name, email address, delivery and billing address, phone number (if you pay via Flatpay), company name and VAT number (if you buy as a business), what you have bought and the payment status. Card details are handled by the payment provider; we never see them. We use this data to produce, deliver and take payment for your sign and to send you an order confirmation and updates about your order.

Legal basis: performance of our contract with you (Article 6(1)(b)).

Bookkeeping

We keep order and payment information because the Danish Bookkeeping Act (bogføringsloven) requires us to. Legal basis: legal obligation (Article 6(1)(c)).

Customer service, legal guarantee claims and withdrawals

If you write to us, complain about a defect or withdraw from a purchase, we process what you write and the information needed to resolve the matter. Legal basis: performance of the contract and our legal obligations (Article 6(1)(b) and (c)) and our legitimate interest in being able to document the matter (Article 6(1)(f)).

When you shop with us again

If you shop with us again from the same browser, we pre-fill your contact details at checkout so that you do not have to type them again. We recognise you by the session ID in your browser. Legal basis: our legitimate interest in making it easy to order again (Article 6(1)(f)). If you want to avoid this, you can clear your browser data.

VAT number

If you buy as a business in an EU country other than Denmark, we check your VAT number in the EU's VIES database. Legal basis: legal obligation under the VAT rules (Article 6(1)(c)).

Security and operations

We record IP addresses and technical information to protect the service against misuse, for example by limiting the number of requests, and to find errors. Legal basis: legitimate interest (Article 6(1)(f)).

Statistics and marketing — only with your consent

If you accept statistics or marketing cookies, we measure how the site is used, and we measure and target our ads via Google and Meta. If you give marketing consent, we also share information about purchases with Meta, for example a hashed (pseudonymised) email address, so that we can measure whether our ads work. Legal basis: your consent (Article 6(1)(a)). You can withdraw it at any time under “Cookie settings” at the bottom of the page. Read more in our cookie policy.

Gallery

We may show sign designs as inspiration in our gallery. We remove personal data before a design is shown. Legal basis: legitimate interest (Article 6(1)(f)). You can always ask us to remove a design.

We use suppliers (data processors) that only process data on our behalf and on our instructions:

• Hosting and operations: Vercel (the website), Supabase (database and files), Hetzner (servers for production files and automation) and Cloudflare (secure connections).
• AI: Anthropic, OpenAI and Google (chat, designs and content checks) and Topaz Labs (image quality enhancement).
• Email: Resend (order confirmations and other emails about your order).
• Production: our production partner in Denmark, which produces and packs your sign.

These recipients are data controllers in their own right for their part:

• Payment: Stripe and Flatpay handle your payment and also process data themselves, for example to prevent fraud.
• Delivery: GLS delivers your parcel.
• Parcel shop: if you choose a GLS parcel shop, we look up the postcode or location with Dataforsyningen (Danish addresses), and the map is loaded from CARTO.
• Marketing (only with your consent): Meta and Google.
• Public authorities when required by law, for example the Danish Tax Agency (Skattestyrelsen).

We never sell your data.

Some of our suppliers are headquartered in the USA or process data there, for example our AI providers. These transfers are based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework where the supplier is certified under it, and otherwise on the European Commission's standard contractual clauses. Write to us if you would like a copy of the relevant safeguards.

• Orders and payment information: 5 years from the end of the financial year to which the purchase relates (Danish Bookkeeping Act). We keep the conversation and design behind an order for the same period so that we can document what was ordered.
• Conversations and designs that do not lead to a purchase: no more than 24 months after the last activity.
• Orders that are not paid: no more than 12 months.
• Your cookie consent choices: no more than 13 months.
• IP address and browser information for ad measurement (only with marketing consent): deleted once the measurement has been sent.
• IP addresses used to protect against misuse: deleted automatically when the time window for the rate limit has expired — typically after minutes or hours.
• Customer service enquiries: for as long as the matter requires. If the enquiry relates to a purchase, we keep it for as long as the order.

You have the right to:

• access the data we process about you,
• have incorrect data corrected,
• have data deleted,
• have the processing restricted,
• receive your data in a commonly used, machine-readable format (data portability),
• object to processing based on our legitimate interest,
• withdraw your consent. This does not affect the lawfulness of the processing carried out before you withdrew it.

Email hej@justasign.ai if you want to exercise your rights. We will reply within one month. We cannot delete data that we are required to keep under the Danish Bookkeeping Act before the retention period ends.

If you are unhappy with how we process your data, you can complain to the Danish Data Protection Agency (Datatilsynet):

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
dt@datatilsynet.dk
datatilsynet.dk

You can also complain to the supervisory authority in the country where you live — in the UK, that is the Information Commissioner's Office (ICO).

We use necessary cookies and local storage in your browser, for example for your basket, language and session ID, and — only with your consent — statistics and marketing cookies. Read more in our cookie policy.

We update this privacy policy when the way we process data changes. The date at the top shows when this version came into effect.