Privacy Policy
Effective 19 October 2026 · Version 1
Just Enough Solutions ApS · CVR 45958388 · Fæsted Engvej 4, 6630 Rødding, Denmark · support@justenoughsolutions.comThis policy explains how we process personal data when you use Rekura at https://rekura.app. We follow the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act (databeskyttelsesloven).
Who is responsible
Just Enough Solutions ApS (CVR 45958388), Fæsted Engvej 4, 6630 Rødding, Denmark, is the data controller. Contact us at support@justenoughsolutions.com about anything in this policy.
What we process and why
| Data | Why we use it | Legal basis |
|---|---|---|
| Your email address, name, sign-in method, and sessions | To create your account, keep you signed in, and email you receipts, such as for a withdrawal | Contract (GDPR art. 6(1)(b)) |
| What you create in Rekura, your display name, and your plan | To provide the service | Contract (art. 6(1)(b)) |
| Your orders, subscription status, and withdrawals | To give you the plan you paid for, handle withdrawals and refunds, and answer billing questions | Contract (art. 6(1)(b)) and our bookkeeping duties (art. 6(1)(c)) |
| Your IP address, browser details, request logs, and server error reports | To keep the service secure and working and to fix errors | Our legitimate interest in a secure, reliable service (art. 6(1)(f)) |
| When you accepted these documents, and which versions | To show what you agreed to | Contract (art. 6(1)(b)) |
| Error, performance, and page view data from your browser | To find and fix problems in the app and see which pages people use | Your consent (art. 6(1)(a)), which you can withdraw at any time |
We only use analytics in your browser if you consent to it; see the Cookie Policy. We don't sell your data, use it for advertising, or make automated decisions about you that have legal or similarly significant effects.
Payments
Polar Software, Inc. sells our plans as merchant of record. Polar collects your payment details, billing address, and tax information, handles the payment, invoice, and VAT, and is responsible for that data under its own privacy policy. We receive your order and subscription details from Polar, but never your full card details.
Who we share data with
We use these providers to run Rekura. They process data on our behalf, except Polar, which also acts on its own behalf as merchant of record:
| Provider | What they do for us | Where | Transfer safeguard |
|---|---|---|---|
| Clerk (Clerk, Inc.) | Sign-in, sessions, and your account profile | United States | EU–US Data Privacy Framework, with standard contractual clauses as a fallback |
| Convex (Convex, Inc.) | Database and backend for your application data | Ireland (EU), operated by a US company | Standard contractual clauses |
| Polar (Polar Software, Inc.) | Checkout, payments, invoices, and subscriptions, as merchant of record | United States | Standard contractual clauses |
| Vercel (Vercel Inc.) | Hosting the website and handling requests | United States | EU–US Data Privacy Framework, with standard contractual clauses as a fallback |
| Resend (Resend, Inc.) | Sending receipts and other account emails | United States | EU–US Data Privacy Framework, with standard contractual clauses as a fallback |
| Sentry (Functional Software, Inc.) | Error monitoring | Germany (EU), operated by a US company | EU–US Data Privacy Framework, with standard contractual clauses as a fallback |
These providers are based in the United States, so your data may be transferred outside the EU. The table shows the safeguard for each transfer. Ask us for a copy of the safeguards. We also share data with authorities when the law requires it, and with our accountant and legal advisers, who are bound by confidentiality.
How long we keep it
- Your account and application data: for as long as you have an account. When you delete your account on the Account page, you have 7 days to change your mind. After that, we erase your profile and application data and delete your sign-in account at Clerk. We keep a record without your name or email that the account was deleted, so that delayed messages from our providers can't recreate it.
- Billing records: Polar keeps its own payment and tax records as merchant of record. We keep our accounting records for 5 years after the end of the financial year, as the Danish Bookkeeping Act (bogføringsloven) requires.
- Logs and error reports: for a limited time, normally no more than 90 days.
Your rights
You have the right to a copy of your data, also in a portable format, and to have it corrected, erased, or restricted. You can object to processing based on our legitimate interests, and withdraw consent at any time without affecting earlier processing. On the Account page you can download a copy of your data, change your display name, and delete your account yourself. For anything else, email support@justenoughsolutions.com. We answer within one month.
You can complain to the Danish Data Protection Agency: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.
Children
Rekura isn't meant for children under 13, the age at which Danish law lets children consent to online services. If you think a child under 13 has given us personal data, contact us and we'll delete it.
Security
Data is encrypted in transit and at rest by our providers, and access to it is limited to what's needed to run the service.
Changes
When we change this policy in a way that matters to you, we publish a new version and ask you to read it the next time you use Rekura. The version and effective date are at the top of this page.