Privacy policy
What we collect, why — and what we don’t do.
Data Envoy ApS is the data controller for the information we process about you when you use data-envoy.com, write to Roger or are a customer of ours.
1. Data controller
Data Envoy ApS, Roskilde, Denmark. Contact: +45 50 48 75 90 (also WhatsApp), write to Roger in the chat, or see Contact.
2. What information we process
- Name, company, phone number or email and message content when you write to us or to Roger
- Files you attach in the chat, such as drawings, PDFs and photos
- Visit counts: an anonymous visit ID that changes every night, the page, where the visit came from and the name of the network — never the IP address
- Technical log data from the web server (IP, browser, time)
- Contract and billing information for customers
- Access and log data from the systems we are given read access to as part of an agreement
3. Purpose and legal basis
We process information in order to answer enquiries, enter into and perform agreements, deliver the agreed services and comply with bookkeeping and tax legislation. Visit counts are used to understand how the site is used. The legal basis is, as a rule, performance of a contract (GDPR Article 6(1)(b)), legitimate interest (point (f)) or legal obligation (point (c)).
We do not use your information to train language models, and we do not resell it.
4. Roger and AI processing
Roger is our own agent, and he answers on both data-envoy.com and ur19.io. Messages to Roger are processed in order to reply to you.
If you say yes when Roger asks whether he may remember the conversation, it is kept under an anonymous ID for up to 12 months after your last visit, and it follows you between the two sites through a one-time link. If you say no, nothing is stored on our side — the conversation lives only in your browser tab.
If you give Roger your contact details and agree that they may be passed on, they go to a person at Data Envoy who follows up.
The memory is kept in our own infrastructure. Where an external language model is involved in the reply, we send only the necessary content and on terms that exclude training on your data.
Type “delete my data” in the chat at any time, and the conversation, your ID and any files you have attached are deleted.
5. Disclosure and data processors
We use a limited number of suppliers for hosting, communication and model calls. All are bound by data processing agreements. An up-to-date list can be provided on request — see Data processing.
6. Retention
- Roger conversations: deleted 12 months after your last visit, or straight away when you type “delete my data”
- Visit counts: deleted after 13 months
- Enquiries and attached files: deleted no later than 24 months after the last contact, unless they are needed for an agreement
- Accounting records: kept for 5 years after the end of the financial year
- Customer data and project files: deleted or returned when the agreement ends, following the agreed procedure
7. Your rights
- Access to the information we process
- Rectification of incorrect information
- Erasure and restriction of processing
- Data portability
- Objection to processing based on legitimate interest
- Complaint to the Danish Data Protection Agency (Datatilsynet)
Write to us if you want to exercise a right — we reply within one month.