LEGAL

Privacy Policy

Last updated: August 2026

1. Controller

Appitioner ApS
Toldbodvej 1A, 6330 Padborg, Denmark
CVR: 39459353
Managing Directors: Stefan Heller, Ahmed Bachtiar Mustafa

For all privacy-related requests, contact us at data@appitioner.dk.

2. Our Approach

We keep data collection to a minimum. This website uses no advertising trackers, no analytics profiling and no marketing cookies. We only process the data described below, and only for the purposes stated.

3. Cookies

We use only technically essential cookies that are required for the website to function (for example session handling and security). Because we do not use any non-essential cookies, no cookie consent banner is required. We do not use advertising or cross-site tracking technologies of any kind.

4. Server Logs

When you visit this website, our hosting infrastructure automatically processes technical connection data (such as IP address, date and time of access, browser type and requested pages) to deliver the site securely and to detect and prevent abuse. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). Log data is automatically deleted after a short period.

5. AI-Based Compliance Check and Image Analysis

Our interactive compliance demo allows users to upload an image and receive an automated content analysis.

How the analysis works

The uploaded image is analysed by an artificial intelligence system. The system evaluates the image and returns automated moderation scores or classifications relating to potentially restricted, harmful or otherwise relevant content.

The analysis is fully automated. The result may be incomplete, inaccurate or contain incorrect classifications. No employee of Appitioner manually reviews the uploaded image as part of the standard demo process.

Data processed

When you use the demo, the following information may be processed:

  • the image voluntarily selected and uploaded by you;
  • technical information required to transmit and analyse the image;
  • the moderation scores and classifications generated by the AI system;
  • a salted, one-way hash of your IP address and a daily usage counter for abuse prevention.

An image may constitute personal data if an identifiable person appears in it. You should only upload an image if you are authorised to use and submit it for analysis.

The demo is not intended for biometric identification, identity verification or decisions producing legal or similarly significant effects concerning an individual.

No storage of uploaded images

Appitioner does not permanently store uploaded images.

The image is transmitted solely for the purpose of performing the analysis, processed temporarily in memory and discarded immediately after the analysis result has been returned.

Uploaded images are not:

  • saved to Appitioner’s servers or databases;
  • stored in Supabase or other object storage;
  • retained in application or analytics logs;
  • added to an image library or reference database;
  • used to train, improve or fine-tune an AI model;
  • used for advertising, profiling or marketing;
  • made available to other users.

Where technically applicable, the generated analysis result is displayed only for the current request and is not permanently linked to the uploaded image.

Analysis provider

The image analysis is performed through Sightengine, operated from Paris, France.

Sightengine receives the image solely to perform the requested moderation analysis and acts as a processor on behalf of Appitioner under a data processing agreement pursuant to Article 28 GDPR.

Sightengine is not authorised by Appitioner to use images submitted through this demo for advertising, independent profiling or the training of unrelated AI models.

Purpose and legal basis

The image and generated result are processed solely to:

  • provide the image analysis requested by the user;
  • demonstrate the functionality of Appitioner’s compliance and content-safety technology;
  • secure the service and prevent automated abuse.

The legal bases are:

  • Article 6(1)(b) GDPR, where processing is necessary to provide the service requested by the user; and
  • Article 6(1)(f) GDPR, based on our legitimate interest in operating, securing and protecting the demo against abuse.

Usage limitation

To keep the free demo available, analyses are limited to three per visitor per day.

For this purpose, Appitioner creates a salted, one-way hash of the visitor’s IP address and associates it with a daily counter. The raw IP address is not stored for this purpose.

The hash and usage counter are automatically deleted after the limitation period is no longer required.

No automated decisions with legal effects

The AI-generated result is provided for demonstration and informational purposes only.

Appitioner does not use the uploaded image or analysis result to make decisions that produce legal effects or similarly significantly affect the person shown in the image or the person uploading it.

Users must not rely on the demo result as the sole basis for legal, employment, credit, insurance, law-enforcement, biometric-identification or similarly significant decisions.

6. Contact by E-mail

If you contact us (for example via data@appitioner.dk), we process the data you provide to handle your request. Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual communication) or our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR). We delete correspondence when it is no longer required, unless statutory retention periods apply.

7. Processors and Hosting

We use carefully selected service providers that process data on our behalf under data processing agreements (Art. 28 GDPR): our website and database hosting provider (including Supabase for application data) and Sightengine for image analysis in the demo. Where processing takes place outside the EU/EEA, it is safeguarded by appropriate mechanisms such as EU Standard Contractual Clauses.

8. Your Rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests. You also have the right to lodge a complaint with a supervisory authority — in Denmark, the Danish Data Protection Agency (Datatilsynet, www.datatilsynet.dk).

To exercise any of these rights, simply e-mail data@appitioner.dk.

9. Automated Analysis and No Automated Decision-Making

The compliance demo uses automated AI-based image analysis. However, Appitioner does not use personal data collected through this website for automated decision-making or profiling that produces legal effects or similarly significantly affects an individual within the meaning of Article 22 GDPR.

The demo provides an informational moderation assessment only. Users are responsible for independently reviewing the result before taking action.

10. Changes to This Policy

We may update this policy when our services or legal requirements change. The current version is always available on this page.