Terms of service
This English translation is provided for convenience. In case of discrepancy, the Danish version prevails.
Version 1.2 · In force from: 19 May 2026 · Last corrected: 25 August 2026
Corrected 25 August 2026. The location of the database has been corrected in clause 9.5 and in the list of sub-processors: Supabase runs in AWS Ireland (eu-west-1), not AWS Frankfurt (eu-central-1), as the document previously stated. This is the correction of a factual error, not a change to the terms. The processing is unchanged, the data has been inside the EU and the EEA throughout, and no transfer to a third country has taken place.
1. Definitions
In this Agreement, the following terms have the meanings given below:
| Term | Definition |
|---|---|
| "the Agreement" | These Terms of Service, including all appendices, which form the entire agreement between the Parties. |
| "the Supplier" | Ejerblik ApS, VAT DK46454928, also referred to below as "Ejerblik", "we" or "us". |
| "the Customer" | The legal person (company) or natural person who creates an account and accepts the Agreement, also referred to below as "you". |
| "User" | Any natural person with access to the Platform under the Customer’s account, including Owners, Editors, Contributors and Guests. |
| "the Platform" | The Ejerblik web application available through ejerblik.com (and any subdomains), including all features, APIs and associated services. |
| "Customer Data" | All data, documents, files and information that the Customer or its Users upload, enter or generate through the Platform. |
| "Subscription" | The service plan chosen by the Customer (Free, Starter or Professional), with its features, limits and price. |
| "Personal Data" | Data as defined in Article 4(1) of the GDPR. |
| "GDPR" | Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, together with the supplementary Danish legislation (the Danish Data Protection Act, Act no. 502 of 23 May 2018). |
| "DPA" | The data processing agreement in Appendix A, entered into under Article 28(3) of the GDPR. |
| "the Service" | The entire delivery under the Agreement, including the Platform, support, AI features and documentation. |
2. Scope and formation of the Agreement
2.1. The Agreement is the entire and binding agreement between the Customer and the Supplier on the use of the Service. It replaces all previous oral and written statements between the Parties on the same subject.
2.2. The Agreement is deemed to be entered into at the earlier of the following:
(a) The Customer ticks "I accept the terms of service and the privacy policy" when creating an account or applying for Early Access;
(b) The Customer logs in and starts using the Platform.
2.3. By entering into the Agreement, the Customer declares that it has the authority required to bind the legal person it represents. If the Customer is a natural person, that person declares that they are at least 18 years old.
2.4. The Agreement also applies to every User the Customer invites to its account. The Customer is responsible for making sure that invited Users know and comply with the terms of the Agreement.
3. Purpose and features of the Service
3.1. Ejerblik is a SaaS-based "Digital Due Diligence" platform that allows owner-managers and companies to:
(a) Map and register digital assets (domains, software licences, cloud services, social media and so on);
(b) Document ownership, access rights, responsibility and risk profiles for each asset;
(c) Produce due diligence reports for use in a business transfer, an audit or internal governance;
(d) Use the AI assistant "AInette" for contextual guidance on digital assets (see section 10);
(e) Monitor renewal dates through an integrated calendar with email reminders;
(f) Invite employees and external advisers with differentiated role-based access.
3.2. The Platform is a documentation and overview tool. Ejerblik does not provide legal, tax, financial or audit advice. The Customer’s use of the Platform does not replace professional advice, and the Customer is encouraged to seek independent advice where relevant.
3.3. The Supplier reserves the right to develop, improve and update the features of the Platform on an ongoing basis. Material changes that reduce existing functionality within the Customer’s active Subscription are notified at least 30 days in advance.
4. Account types, roles and access
4.1. Each Customer gets one company account. The following roles can be assigned under that account:
| Role | Rights | Number |
|---|---|---|
| Owner | Full access, including user management, billing and deletion. Cannot be removed. | 1 (mandatory) |
| Editor | Can create, edit and delete all assets. No access to billing. | Depends on subscription |
| Contributor | Can edit the assets they are responsible for. Cannot create or delete. | Depends on subscription |
| Guest | Read-only access to selected assets. For accountants and advisers. | Unlimited |
4.2. The Customer (the Owner) is solely responsible for assigning roles and the associated rights correctly. The Supplier bears no responsibility for unauthorised actions carried out by Users the Customer has invited.
4.3. Each User must have a unique email address. Sharing login details between individuals is not permitted and constitutes a material breach.
4.4. The Customer is obliged to use strong passwords (at least 8 characters) and is strongly encouraged to enable two-factor authentication (2FA) where it is available.
5. Subscriptions and payment
5.1. Plans. The Service is offered in the following subscriptions:
| Free | Starter | Professional | |
|---|---|---|---|
| Price (monthly) | €0 | €40 | €95 |
| Price (yearly) | €0 | €33/month (€396/year) | €79/month (€948/year) |
| Max. assets | 10 | 50 | Unlimited |
| Max. users (excluding Guests) | 1 | 3 | 6 |
All prices are excl. VAT.
5.2. Billing period. Subscriptions are invoiced in advance, either monthly or yearly, depending on the Customer’s choice. With yearly invoicing, the full amount falls due at the start of the period.
5.3. Means of payment. Payment is made using the payment methods the Supplier makes available from time to time. The Customer is responsible for keeping payment details up to date.
5.4. Late payment. In the event of late payment, a reminder is sent with a 10-day payment deadline. If payment is not made on time, the Supplier may: (a) suspend the Customer’s access to the Service until payment is received; (b) terminate the Agreement after a further 14 days’ written notice. The Danish Interest Act, consolidated act no. 459 of 13 May 2014 as amended, applies to late payments.
5.5. Price changes. Price changes are notified at least 60 days before they take effect. Existing yearly subscriptions are affected only from the next billing period. Where prices increase, the Customer has the right to terminate before the new price takes effect.
5.6. Upgrading and downgrading. The Customer can upgrade its Subscription at any time with immediate effect. On downgrading, the new plan takes effect from the next billing period. If the Customer’s assets or users exceed the limits of the new plan, the Customer must reduce them before the downgrade takes effect.
5.7. Refund policy. Yearly subscriptions are not refunded. Monthly subscriptions can be cancelled with effect from the end of the current billing period. In the event of a material service failure under section 11 (SLA), the Customer may claim a proportionate credit.
6. Customer obligations and acceptable use
6.1. The Customer undertakes to use the Service solely in accordance with: (a) applicable Danish and EU law; (b) this Agreement; (c) ordinary ethical standards for business conduct.
6.2. The Customer must not:
(a) Upload, store or process material that infringes third-party intellectual property rights, privacy or other rights;
(b) Use the Platform to store special categories of personal data (GDPR Article 9) unless a valid legal basis exists;
(c) Attempt to circumvent technical security measures, including access controls and rate limits;
(d) Use automated tools (bots, scrapers, crawlers) to access the Platform without prior written approval;
(e) Resell, sublicense or otherwise commercialise access to the Service;
(f) Place an unreasonable load on the Platform, including by mass uploading data beyond normal business use;
(g) Use AInette (section 10) to generate content that is misleading, harmful or unlawful.
6.3. In the event of a breach of clause 6.2, the Supplier may: (a) suspend that User’s access with immediate effect; (b) terminate the Agreement without notice in the event of a material or repeated breach; (c) claim compensation for documented losses.
6.4. The Customer warrants that all Customer Data uploaded to the Platform has been lawfully obtained, and that the Customer has the necessary basis for processing any personal data contained in it.
7. Intellectual property
7.1. The Supplier’s rights. All intellectual property rights in the Platform, including source code, design elements, trade marks, logos, documentation and AI models, belong to the Supplier or its licensors. The Agreement transfers no intellectual property rights to the Customer.
7.2. Licence to use. The Supplier grants the Customer a non-exclusive, non-transferable, time-limited licence to use the Platform in accordance with the Agreement and the chosen Subscription. The licence is conditional on payment being made on time and on compliance with the terms of the Agreement.
7.3. The Customer’s rights in Customer Data. The Customer retains full ownership of all Customer Data. The Supplier acquires no rights over Customer Data beyond the limited right to process data in order to deliver the Service.
7.4. Feedback. If the Customer sends suggestions, ideas or feedback about the Platform, the Supplier is entitled to use that input freely for product development without compensation or credit.
7.5. Aggregated statistics. The Supplier may produce anonymised, aggregated statistics based on usage data (for example the average number of assets per industry). Such statistics are not Customer Data and may be used freely by the Supplier.
7.6. Customer reference and marketing.
(a) The Customer grants the Supplier a non-exclusive, royalty-free and time-limited right to use the Customer’s company name and logo as a customer reference on ejerblik.com, in the Supplier’s sales and marketing material (including presentations, social media, newsletters and pitch material) and in connection with fundraising and investor communication.
(b) Use of the logo must follow the Customer’s current brand guidelines, if those have been made available to the Supplier in writing.
(c) The Customer may withdraw the permission at any time by written notice to [email protected]. The withdrawal takes effect within 30 days of receipt and does not affect material already printed or distributed offline before the withdrawal.
(d) Quotations, named testimonials, case studies or statements attributed to a specific employee of the Customer are used only with the prior written consent of both the Customer and the person quoted.
(e) The Supplier acquires no further rights in the Customer’s trade marks, and any use must respect the Customer’s intellectual property rights under the Danish Trade Marks Act and the Danish Marketing Practices Act.
8. Customer data and ownership
8.1. Ownership. The Customer owns all Customer Data at all times. The Supplier acts solely as processor (see Appendix A) and technical storage provider.
8.2. Data portability. The Customer may at any time request an export of its Customer Data in a structured, machine-readable format (CSV or JSON). The Supplier answers such requests within 30 days.
8.3. No data mining. The Supplier does not use Customer Data for marketing, profiling, sale to third parties or training of AI models. Customer Data is accessed solely in order to: (a) deliver and operate the Service; (b) carry out technical troubleshooting at the Customer’s request; (c) meet legal obligations.
8.4. Backup. The Supplier takes regular backups of Customer Data through the underlying database platform. Backup does not constitute a separate obligation to restore data after the Customer’s own mistakes (for example deleting assets).
8.5. Deletion. On termination of the Agreement, all Customer Data is deleted within 30 days, see section 14. This does not apply to data the Supplier is required to retain under the law (for example the 5-year retention obligation for accounting records under the Danish Bookkeeping Act).
9. Processing of personal data (GDPR)
9.1. Allocation of roles. The Customer is the controller of the personal data the Customer enters into the Platform (for example names, email addresses and access details for employees linked to digital assets). The Supplier is the processor in relation to that personal data.
9.2. Data processing agreement. The Parties’ data processing relationship is governed by the Data Processing Agreement in Appendix A, drawn up in accordance with Article 28(3) of the GDPR.
9.3. Categories of personal data. The Platform processes the following categories:
| Category | Examples | Basis |
|---|---|---|
| Contact details | Name, email, telephone, company name, VAT number | Art. 6(1)(b): contract |
| User access data | Roles, departments, last active | Art. 6(1)(b): contract |
| Asset metadata | Persons responsible, admin email addresses | Art. 6(1)(b): contract |
| Technical log data | IP addresses (pseudonymised), browser | Art. 6(1)(f): legitimate interests |
| Analytics data | Page views, click behaviour (anonymised) | Art. 6(1)(a): consent |
| Correspondence | Support enquiries, feedback | Art. 6(1)(b): contract |
9.4. Sub-processors. The current list of sub-processors is set out in Appendix C. The Supplier notifies the Customer at least 14 days before adding new sub-processors. The Customer may object before the notice period expires; if the Parties cannot reach agreement, the Customer may terminate the Agreement with effect from the date of the change.
9.5. Data storage. All Customer Data is stored within the EU and the EEA: the database in Supabase PostgreSQL (AWS Ireland, eu-west-1), the application server at Hetzner Online GmbH (Falkenstein, Germany) and files in Supabase Storage (AWS Ireland, eu-west-1). No transfer to third countries takes place without the Customer’s prior written consent and the establishment of a valid transfer basis (GDPR Chapter V).
9.6. The Supplier’s own privacy policy, covering account administration, cookies and analytics tools, is available at ejerblik.com/en/privacy-policy.
10. The AI assistant "AInette": special terms
10.1. Features. AInette is an AI-based assistant that gives contextual guidance on the Customer’s digital assets. AInette has read access only to the Customer’s data and cannot create, change or delete assets.
10.2. Data sharing with the AI supplier. AInette runs on the Anthropic Claude API. When AInette is used, the following data is sent to Anthropic Inc. (USA) as sub-processor: the Customer’s current message, a contextual extract of the Customer’s assets (at most 15 assets: name, platform, risk and status), and the company name and industry. The data is not used to train AI models, in accordance with Anthropic’s Commercial Terms of Service.
10.3. Limitations and disclaimer. AInette is a support tool and does not provide professional advice:
(a) AInette’s answers may contain errors, inaccuracies or out-of-date information;
(b) The Customer should always verify AInette’s recommendations independently;
(c) The Supplier disclaims all liability for decisions taken on the basis of AInette’s output;
(d) AInette is subject to a rate limit of 30 messages per hour per User.
10.4. Prohibited use. AInette must not be used to: (a) generate legal documents with binding effect; (b) produce misleading or harmful content; (c) attempt to circumvent security filters or system prompts.
11. Service level and availability
11.1. Availability. The Supplier aims for uptime of 99.5% measured per calendar month (excluding planned maintenance). The detailed SLA is set out in Appendix B.
11.2. Planned maintenance. Maintenance requiring downtime is notified at least 48 hours in advance by email or on the Platform’s status page. As far as possible, maintenance is placed outside normal Danish working hours (Monday to Friday, 08:00 to 17:00 CET).
11.3. Monitoring. The Supplier monitors the operational status of the Platform, including database availability, the authentication service, email delivery and the external AI API.
11.4. Support. Support is provided by email ([email protected]) with a response time within 24 hours on working days. Professional customers have priority in the support system.
11.5. SLA credit. If uptime in a given month falls below 99.0%, the Customer is entitled to a proportionate credit of that month’s subscription payment. A claim for credit must be made in writing within 14 days of the end of the month concerned. Free plans are excluded from SLA credits.
12. Limitation of liability
12.1. Scope of liability. The Supplier’s total liability under the Agreement, regardless of the number of claims and the legal basis (contract, tort or otherwise), is limited to the amount the Customer has actually paid the Supplier in the 12 months preceding the event causing the loss.
12.2. Excluded types of loss. The Supplier is under no circumstances liable for:
(a) Indirect loss, including operating loss, loss of profit, loss of goodwill or loss of data caused by the Customer’s own actions;
(b) Loss arising from the actions of third parties, including outages at sub-processors;
(c) Loss arising from the Customer’s failure to comply with the Agreement, including inadequate access control;
(d) Loss exceeding the amounts the Customer has paid in subscription fees.
12.3. Exceptions to the limitation. The limitations above do not apply in the event of: (a) gross negligence or intent on the part of the Supplier; (b) a breach of the GDPR by the Supplier that results in a fine from the Danish Data Protection Agency; (c) infringement of the Customer’s intellectual property rights in Customer Data.
12.4. The Customer’s responsibility. The Customer is responsible for: (a) the actions of all Users under the Customer’s account; (b) the accuracy and lawfulness of all uploaded Customer Data; (c) securing access credentials and complying with role-based access control; (d) any third-party claims arising from the Customer’s use of the Service.
13. Confidentiality
13.1. Both Parties undertake to treat confidential information received from the other Party with the same care they apply to their own confidential information, and in any event with reasonable care.
13.2. Confidential information includes, but is not limited to: (a) Customer Data and business information; (b) the Supplier’s technical architecture, pricing and business strategy; (c) all information marked "confidential" or which by its nature clearly ought to be treated as confidential.
13.3. The confidentiality obligation does not apply to information that: (a) is or becomes publicly available without a breach of this Agreement; (b) is lawfully received from a third party without a confidentiality restriction; (c) must be disclosed under legislation, a court order or an order from a public authority.
13.4. The confidentiality obligation applies for the term of the Agreement and for 2 years after it ends.
14. Term, termination and deletion
14.1. Term. The Agreement takes effect on the Customer’s acceptance (see clause 2.2) and runs until it is terminated by one of the Parties.
14.2. Termination by the Customer. The Customer may terminate the Agreement at any time with effect from the end of the current billing period. Termination is made in the Platform settings or in writing to [email protected].
14.3. Termination by the Supplier. The Supplier may terminate the Agreement on 90 days’ written notice. If the Service is closed down in its entirety, 6 months’ notice is given.
14.4. Termination for cause. Either Party may terminate the Agreement with immediate effect in the event of the other Party’s: (a) material breach that is not remedied within 14 days of a written demand; (b) bankruptcy, suspension of payments or similar insolvency proceedings.
14.5. Consequences of termination:
(a) The Customer’s access to the Platform ends when the notice period expires;
(b) The Customer may request an export of Customer Data within 30 days of termination;
(c) All Customer Data is permanently deleted 30 days after termination, unless the law requires longer retention;
(d) The Supplier confirms deletion in writing on request.
14.6. Surviving provisions. Sections 7 (IP), 8 (Customer Data), 12 (Liability), 13 (Confidentiality) and 18 (Governing law) survive termination of the Agreement.
15. Changes to the terms
15.1. The Supplier may change these terms on 30 days’ written notice by email to the Customer’s registered email address and by publication on the Platform.
15.2. Changes that are solely to the Customer’s advantage (for example added functionality or a price reduction) may be implemented without notice.
15.3. If the Customer cannot accept the changes, the Customer may terminate the Agreement before the changes take effect, with effect from the date they take effect. Continued use of the Service after that date is regarded as acceptance.
16. Force majeure
16.1. Neither Party is liable for failure to perform its obligations to the extent that performance is prevented or delayed by circumstances outside that Party’s reasonable control, including but not limited to: natural disasters, war, terrorism, pandemics, strikes, lock-outs, orders from public authorities, outages at third-party infrastructure (including cloud providers), cyber attacks or power failures.
16.2. The affected Party must without undue delay give the other Party written notice of the force majeure event and its expected duration.
16.3. If the force majeure situation lasts more than 60 days, either Party may terminate the Agreement with immediate effect and without liability.
17. Assignment
17.1. The Customer may not assign its rights or obligations under the Agreement to a third party without the Supplier’s prior written consent.
17.2. The Supplier may assign the Agreement to a group company or in connection with a merger, business transfer or sale of material assets, provided that the acquiring party assumes all obligations under the Agreement. The Customer is notified of this with reasonable notice.
18. Governing law and disputes
18.1. Governing law. The Agreement is governed by Danish law, excluding Danish conflict-of-law rules (the CISG does not apply).
18.2. Negotiation. If a dispute arises between the Parties, the Parties undertake first to seek to resolve it by negotiation in good faith within 30 days.
18.3. Venue. If the dispute cannot be resolved by negotiation, it is decided by the Danish courts, with the District Court of Kolding as the proper venue in the first instance.
18.4. Mediation. The Parties may jointly agree to refer the dispute to mediation through the Danish Institute of Arbitration before court proceedings.
19. Severability
If one or more provisions of the Agreement are held to be invalid, unlawful or unenforceable, this does not affect the validity of the remaining provisions. The Parties undertake in good faith to replace the invalid provision with a valid one that reflects the original intention as far as possible.
20. Contact
Ejerblik ApS
VAT DK46454928
Email: [email protected]
Support: [email protected]
Data processing agreement (DPA)
The data processing agreement has been separated out as a standalone document in accordance with Article 28(3) of the GDPR. It is binding on both parties as Appendix A to these Terms of Service.
Read the data processing agreement (DPA) →Service Level Agreement (SLA)
B.1. Service parameters
| Parameter | Target |
|---|---|
| Monthly uptime | 99.5% |
| Notice of planned maintenance | At least 48 hours |
| Incident response (critical) | Within 4 hours (working days) |
| Incident response (non-critical) | Within 24 hours (working days) |
| Support response time (email) | 24 hours (working days) |
| Data encryption in transit | TLS 1.2+ |
| Data encryption at rest | AES-256 |
| Backup frequency | Daily |
| Recovery Point Objective (RPO) | 24 hours |
| Recovery Time Objective (RTO) | 8 hours |
B.2. SLA credits
| Uptime per month | Credit |
|---|---|
| 99.0% to 99.5% | 10% of the month’s payment |
| 95.0% to 99.0% | 25% of the month’s payment |
| Below 95.0% | 50% of the month’s payment |
Free plans are excluded from SLA credits.
Sub-processors
Last updated: 1 May 2026
C.1. Approved sub-processors
| Sub-processor | Function | Data location |
|---|---|---|
| Supabase Inc. (USA, DPA + SCCs) | Database, authentication, file storage | AWS Ireland (eu-west-1) |
| Hetzner Online GmbH (DE) | Application server and hosting | Falkenstein, Germany |
| Resend Inc. (USA, DPA + SCCs) | Transactional email | EU |
| Anthropic Inc. (USA, DPA + SCCs) | AI assistant (AInette) | USA (no data persistence) |
| MailerLite UAB (LT) | Newsletter (with consent only) | EU |
| Umami Software | Web analytics (with consent only) | EU |
| Microsoft Corporation | Behavioural analytics, heatmaps and session recordings (with consent only) | EU |
For sub-processors based in the USA, EU standard contractual clauses (SCCs) under Commission Decision 2021/914 have been implemented.