Privacy Policy

This policy describes how Webkonsulenterne A/S, CVR 40887731 ("we"), collects and processes personal data through the Alertly service. It applies both to visitors of alertly.site and to Alertly customer accounts.

1. Data controller

Webkonsulenterne A/S is the data controller for personal data collected about our customers and website visitors. Contact: [email protected].

2. Data we collect

• Account data — name, email address, account/company name, hashed password, membership role.
• Billing data — invoice references, subscription status, currency, and country. Card details never touch our servers; payment processing is handled by Frisbii (Reepay).
• Site configuration — the URL, API key, timezone, alert-rule settings, and integration credentials for each site you connect.
• Monitoring events — data reported by the alert-reporter WordPress plugin and by connected integrations (Cloudflare, Google, Meta, cPanel, etc.). Events may include IP addresses, user-agent strings, order IDs, and diagnostic messages about your site.
• Communication — support emails you send us and any content you post inside the dashboard.
• Server logs — request logs from alertly.site (IP address, browser type, requested paths, timestamps) kept for security and abuse prevention.

3. Purpose and legal basis

• Deliver the Service you contracted for (GDPR Art. 6(1)(b), performance of a contract).
• Bill you and comply with tax law (GDPR Art. 6(1)(c), legal obligation).
• Detect abuse, secure the platform, and improve the product (GDPR Art. 6(1)(f), legitimate interest).
• Send transactional email — receipts, monthly reports, incident alerts — under your consent inferred from account creation.

4. Retention

Account data is kept for as long as your account is active. When you delete an account, personal data is erased within 30 days except where retention is required by law (accounting records: 5 years per Danish bookkeeping law).

Monitoring event data is kept for the retention period configured per account (default 90 days) and then automatically purged.

5. Sub-processors

We use a small set of sub-processors to deliver the Service, including Frisbii (billing), Resend (email), Telegram (alert delivery), Cloudflare (DNS & edge), and EU-hosted infrastructure managed by Webkonsulenterne A/S. The current authoritative list — with data categories, locations, and transfer basis — is published at alertly.site/sub-processors and updated with at least 30 days' advance notice before any change.

Enterprise customers can request a signed Data Processing Agreement by emailing [email protected].

6. Transfers outside the EU

We store customer data on servers located in the European Union. Some sub-processors (e.g. Telegram, Cloudflare) may transfer data outside the EU under the EU Standard Contractual Clauses.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing based on legitimate interest. You may also withdraw consent at any time (where processing is based on consent) and lodge a complaint with the Danish Data Protection Authority (Datatilsynet).

To exercise any of these rights, contact [email protected]. We respond within one month.

8. Cookies

alertly.site uses only strictly necessary cookies for authentication and session management. We do not use tracking cookies or third-party analytics scripts on the marketing pages.

9. Security

Data is encrypted in transit (TLS 1.2+) and at rest on the database volume. Access to production systems is restricted to Webkonsulenterne A/S staff on a need-to-know basis. Secrets are stored encrypted and never logged.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced by email. The latest version is always available at alertly.site/privacy.

11. Contact

Webkonsulenterne A/S · CVR 40887731 · Hadsundvej 112, 9550 Mariager, Denmark · [email protected] · +45 54 62 54 21