Privacy notice

This tool compares a Danish property valuation declaration with what the public registers record, and drafts an objection for the owner to file. The account holder is the controller of the property data they upload; we are their processor and act on their instructions.

Who is responsible

Data controller for the account itself (the people who sign in): Armen Sarkisian, Komitas 57, 0032 Yerevan, Armenia. Questions: privacy@vitersoft.com.

What is held

• The e-mail address you sign in with, and your name if you give one.
• The account name and CVR number, because they head every letter the tool writes.
• Each property you add: its BFE number, address, cadastral number and municipality — all of which are public register data, but together they identify an owner.
• Every declaration you upload: the file, the text read out of it, and the fields taken from that text. The page text is kept because it is the only way to show afterwards that a figure in a letter came from the document rather than from a model.
• The register answers, kept whole, with the day each one was read.
• An append-only log of what was done and by whom, and counts of how the tool was used.

We never ask for MitID, never hold anyone's credentials to a government service, and never file anything in your name. There is no "submit" button anywhere in this product.

Who else sees it

• Cloudflare, Inc. (EU region) — runs the application.
• Supabase (EU, Frankfurt) — the database and the file store. The public keys hold no rights at all; only our server reads it.
• Sendinblue SAS, 9-17 rue Salneuve, 75017 Paris, France (trading as Brevo) — sends the sign-in links. It receives the address and the text of the message.
• PostHog (EU, Germany) — counts how the tool is used: numbers and categories, never an address, a CVR number or a BFE number.
• OpenRouter, Inc. — reads the fields out of an uploaded declaration, and reads the characters off a scan. This means the declaration's text is sent to a model provider. Every request is routed only to providers that keep nothing and train on nothing, and the feature is off entirely where no key is configured — the fields are then typed in by hand.
• The public registers we query — the address register and cadastre at Dataforsyningen, the soil contamination register at Danmarks Miljøportal, and the planning register — receive the BFE number or the coordinates of the property, and nothing about you.

Where a model is used, and where it is not

A model is used for two things: reading fields out of an uploaded PDF, and transcribing a scan. It is not asked to decide anything. Every field it returns is checked against text this server extracted itself — the line it quoted must occur on the page it named, and the digits of a number must occur inside that same line — and a field that fails is thrown away and shown to you as thrown away.

No sentence of any letter is written by a model. The letters are assembled by code from values you have confirmed, and a letter containing a number that the stored data does not account for is refused rather than handed over.

How long

As long as the account exists, and not a moment longer than you want. Nothing here is deleted on a clock, and that is a decision rather than an omission: what this tool stores is the register answers your objection rests on, and an objection can turn into a complaint that is still being decided long afterwards. A timer that erased the evidence while the case was running would destroy the thing you came here for, on a date nobody chose.

So the clock is yours. Deleting the account deletes the properties, declarations, uploaded files, register answers, letters, events and the audit log — the files first, because nothing cascades into a file store. Nothing is kept afterwards except the fact that the account is gone. The one thing that does go by itself is a spent sign-in link: its record is removed the next time a link is issued, because a used link has no further purpose.

Your rights

Access, correction, erasure, portability and objection under the GDPR. Everything the account holds can be read on screen, and erasure is a button in Settings that asks you to type the account name. Complaints to Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby.

Cookies

One cookie, which keeps you signed in. Analytics stores nothing on your device and creates no profile, so there is no consent banner to click away.