Data processing agreement

Who we are: Talelike is a product of AI Softwarehus, KJ Venture ApS, CVR 45174344, Denmark.
Address: KJ Venture ApS, Johan Kellers Vej 18, 4. tv., 2450 København, Denmark
Effective from: 1 November 2026
Contact: [email protected]

Roles

You, the customer, are the controller. KJ Venture ApS (AI Softwarehus), CVR 45174344, is the processor.

What we process

We process the personal data you and your visitors put into Talelike, for as long as you have an account and only to provide the service. Depending on what you use, that includes:

your users: name, email and role
contacts, companies and deals in the CRM, and emails in mailboxes you connect
newsletter subscribers with proof of consent, form answers, questionnaire answers and bookings
shop customers, orders, gift cards and carts
visit statistics, counted without cookies and without storing IP addresses

Some of this is deleted automatically: raw visit statistics after 90 days and messages in the CRM inbox after 365 days. The rest stays until you delete it or the agreement ends.

Your instructions

We process the data only on your documented instructions: these terms, this agreement and what you set up and do in Talelike. If we believe an instruction breaks data protection law, we tell you. If EU or Danish law requires us to process data in another way, we tell you first, unless the law forbids it.

Confidentiality

Only the people who run Talelike for us can reach your data, and they are bound by confidentiality. Opening a customer’s data from our side requires entering a password again, and every such access is logged.

Security

The measures in place today:

the service runs on our own server in Denmark, and each customer has a separate database
every request is limited to your account, and tests check that one account cannot reach another
all traffic is encrypted (HTTPS)
passwords are stored only as scrypt hashes; mailbox passwords and integration keys are encrypted with AES-256-GCM
sign-in attempts are limited, and every user has a role that decides what they can do
actions in your account are logged
the databases are backed up every night, and restoring a backup is tested every week

Subprocessors

You give us general permission to use these subprocessors:

Cloudflare – Network in front of our server: secure connections (HTTPS), DNS for domains and email routing (USA)
Resend – Sending email from Talelike and from your website, shop and mailings (USA)
Stripe – Payments (USA)
OpenAI – AI features: text and image suggestions from the writing assistants (USA)
Anthropic – AI features: design suggestions for your website (USA)
Openprovider – Registering a domain, only if you buy one through us (Netherlands)

We make sure each of them is bound by data protection terms at least as strict as these. Before we add or replace one, we tell account owners by email, so you can object.

Services you connect yourself, such as your own payment provider, shipping service or card terminal, work under your own agreement with them.

Helping you

We help you answer requests from the people whose data you hold, for example to see or delete their data. On request, we can gather the data held about one person across your contacts, orders, bookings, answers and gift cards. We also help with risk assessments and with questions from Datatilsynet, as far as our part of the processing goes.

Personal data breaches

If we become aware of a personal data breach that affects your data, we tell you without undue delay, with what we know, what it means and what we are doing about it.

When the agreement ends

When the agreement ends, you choose: we send you a copy of your data, or we delete it, or both. We then delete it from our systems, and backup copies disappear within eight weeks. We keep only what the law requires us to keep.

Contact

Questions about this agreement, or need it signed as a separate document? Write to [email protected]. We give you the information you need to show that it is followed.