Draft, to be reviewed by a lawyer before launch. Text in [brackets] still needs filling in.

Privacy policy

Last updated: [date]

RezUp is a Windows program that enlarges images, with a free demo that runs in your browser. Both run on your own computer: your images are never uploaded to us or anyone else. This page explains the little data we do handle, why, and your rights.

Who we are

RezUp is sold by Amstrup Commerce, [legal form], [address], [country], company registration number [CVR number] (“we”). We are responsible for the data described here. Contact: hello@getrezup.com.

What we collect and why

• Demo sign-in. When you ask for more free images in the browser demo, we receive your e-mail address. We use it to send your sign-in code and to count your free images. Legal basis: providing the service you asked for (GDPR art. 6(1)(b)).
• Free-image counter. We store how many free images you have used. Your first demo image is counted only in your own browser. Legal basis: our legitimate interest in preventing abuse of the free demo (art. 6(1)(f)).
• Tips and offers. Only if you tick the box when signing in, we use your e-mail address to send occasional tips and offers. You can unsubscribe at any time with the link in every e-mail. Legal basis: your consent (art. 6(1)(a)).
• Licence keys. When you activate a licence, the program sends the key and an anonymous identifier of your computer (a one-way code derived from Windows’ installation ID, not your name or files) to check that the key is valid and how many computers use it.
• Purchases. Payments are handled by Polar (polar.sh), which acts as the merchant of record: Polar processes your payment details, invoice and VAT under its own privacy policy. We receive your name, e-mail and order details.
• Website. This website uses no tracking cookies and no advertising trackers. [Update if analytics are added.]

We never receive your images, file names or anything you make with RezUp.

Who processes data for us

• Cloudflare (website hosting, the sign-in service and its database)
• Resend (sending sign-in codes by e-mail, from servers in Ireland)
• Polar (payments and licence keys)
• Google Fonts (the website’s fonts, so Google sees your IP address when a page loads)
• jsDelivr (delivers a component of the browser demo, so it sees your IP address when the demo loads)

Some of these companies are based in the USA. Transfers are covered by the EU–US Data Privacy Framework and/or the EU standard contractual clauses. [Confirm per provider.]

How long we keep it

Sign-in data is kept for as long as your account is active and deleted [24 months] after your last sign-in, or sooner if you ask. Sign-in codes are deleted within a day. Purchase records are kept as long as accounting law requires (5 years in Denmark).

Your rights

You can ask to see, correct, export or delete your data, object to its use, or withdraw consent, by e-mailing hello@getrezup.com. You can also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).