Privacy Policy

This policy explains what personal data Paragate handles, why, who else sees it, and what you can ask of us. The short version: we collect what we need to run Paragate, we do not sell your data, and we show no ads.

Who is responsible

Ki-Jung Dejbjerg, trading as Paragate, CVR 34908370, Smedehalden 3, C/O Rangjung Yeshe Gomde, 8420 Knebel, Denmark, is the data controller. For anything about privacy, write to [email protected].

What we collect, and why

What	Why	Legal basis (GDPR)
Your account — email address; your name and profile picture if you sign in with Google; your organisation's name, logo and members	To sign you in, keep your cards yours, and let a team work together	Contract, art. 6(1)(b)
What you make — the text you paste, photos and logos you upload, and your cards	To turn your text into cards, store them and show them to the people you share them with	Contract, art. 6(1)(b)
Billing — your plan and its status. Paddle handles payment details; we never see your card number	To give you the plan you paid for	Contract, art. 6(1)(b); bookkeeping law, art. 6(1)(c)
Security — your IP address, turned into a scrambled code for a short time to stop abuse. We do not store your IP address itself	To keep Paragate safe and fair to use	Legitimate interest, art. 6(1)(f)
Anonymous counts — for example that a deck was opened or read to the end. These contain no name, email, IP address or text	To understand whether Paragate works, and show senders how their cards are read	Legitimate interest, art. 6(1)(f)
Analytics — how the site is used, only if you accept analytics cookies	To improve Paragate	Consent, art. 6(1)(a)

We never write the text you paste, form answers or contact details into our logs.

People who open a link, and people who answer

You do not need an account to open a Paragate link, and we do not track you across other sites. If a card asks you a question and you answer, your answer goes to the person who made the cards. For your answer, they are the controller and we process it on their behalf — ask them what they do with it. You can also write to us, and we will help.

AI processing

To turn your text into cards, we send the text and up to three of your photos to an AI model provider (Google, directly or through OpenRouter). They receive it only to produce your cards. We do not use your content to train AI models.

Who else handles the data

We use these providers. Each may only use the data to provide their service to us.

• Cloudflare — hosting, databases and file storage (USA/EU).
• Google — AI models, and sign-in with Google if you choose it (USA/EU).
• OpenRouter — routes requests to AI models (USA).
• Resend — sends the sign-in email (USA).
• Paddle — our reseller and Merchant of Record. Paddle handles checkout, payment, invoices, tax and refunds, and is its own controller for that data under the Paddle privacy notice (UK/EU).

When data goes outside the EU/EEA, it is protected by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission's standard contractual clauses.

How long we keep it

• Your cards and photos stay until you delete them. Your links keep working until then. A deleted deck waits in a trash for 7 days, so you can bring it back; after that it is deleted with its photos and answers.
• Drafts made without an account that were never shared are deleted after 90 days.
• Form answers stay until the person who made the cards deletes them or the cards.
• Your account stays until you ask us to delete it.
• Sign-in links expire after 5 minutes. Security codes last only minutes.
• Billing records are kept as long as Danish bookkeeping law requires (5 years).

Your rights

You can ask to see the data we hold about you, correct it, delete it, get a copy to take elsewhere, limit how we use it, or object to our use of it. Where we rely on your consent, you can withdraw it at any time — for cookies, use "Cookie settings" at the bottom of any page. Write to [email protected]; we answer within one month.

If you think we handle your data wrongly, you can complain to the Danish Data Protection Agency, Datatilsynet, or to the authority where you live.

Cookies

What we store in your browser, and your choice about it, is on our Cookie Policy.

Children

Paragate accounts are for people aged 16 and over.

Changes

If we change this policy in a way that matters, we tell you by email or in the app before it applies. The date at the top shows the latest version.