Privacy Policy

Last updated: June 15, 2026

1. Data controller

The controller of your personal data is To sider ApS, Armeniensvej 27, 2300 København S, Denmark (CVR DK42753491). For any privacy question, contact us at pa@tosider.dk.

2. What we collect and why

Account data. When you create an account we store your email address and name. This is used to provide the service and send the emails you subscribe to. Authentication is handled by Clerk.

Subscription data. If you subscribe, we store your subscription status and a reference to your Stripe customer/subscription, so we know whether your access is active.

Email preferences. Whether you have opted into the weekly digest and/or the paid instant alerts, managed via Resend.

Usage data. Aggregate analytics about how the site is used, via Google Analytics.

3. Payment data and card details

We do notcollect or store your card number. All payments are processed by Stripe, a PCI-DSS compliant payment provider that acts as an independent data processor for your payment information. We retain only a token/reference to your Stripe customer and subscription — never the card details themselves. Stripe’s handling of your data is described in their privacy policy: https://stripe.com/privacy.

4. Legal bases (GDPR)

We process your data to perform our contract with you (providing the service and subscription), on the basis of your consent (for marketing emails, which you can withdraw at any time), and on our legitimate interest in operating and improving the service.

5. Processors and third parties

We share data only with service providers that help us run AI Release Tracker, each acting as a data processor under appropriate agreements: Clerk (authentication), Stripe (payments), Resend (email delivery), Google Analytics (usage analytics), and Vercel (hosting). We do not sell or rent your personal data to third parties for their own purposes.

6. Business transfers

If AI Release Tracker or To sider ApS is involved in a merger, acquisition, reorganisation, or sale of all or part of its assets, your personal data may be transferred to the successor or acquiring entity as part of that transaction. This is a transfer of the business, not a sale of your data to a third party for its own purposes. We will notify you of any such change (for example by email or a notice on the site), and the new owner will remain bound by this policy or one that offers equivalent protection.

7. Data retention

We keep your account and subscription data for as long as you have an account, and as required to meet legal and accounting obligations. You can ask us to delete your account at any time.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to certain processing. You can withdraw consent to marketing at any time from your settings. To exercise any right, email pa@tosider.dk.

If you believe we handle your data unlawfully, you may lodge a complaint with your local data protection authority in the EU/EEA. You can find yours via the European Data Protection Board: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

9. Cookies

We use a small number of cookies that are necessary for authentication and for anonymous usage analytics. You can control cookies through your browser settings.

Questions about your privacy? Email pa@tosider.dk.