Your data, your control

Privacy Policy

Last updated: 26 October 2026

The Danish version is the legally binding one. Translations are provided for information only.

01

Privacy Policy

Data controller

ProAssist ApS (hereinafter "we", "us" or "ProAssist") is the data controller for the processing of the personal data we receive about you. You can reach us using the details in the section Contact.

What information do we collect?

We collect the following categories of personal data:

  • Account details: Name, email address, phone number, profile picture and account type (private/business).
  • Business and VAT details: CVR number, company name and VAT number. If you are a helper with a private account, you can also state a Danish CVR and VAT number yourself if you are VAT-registered.
  • Payment details: Card details are processed by Stripe and are not stored by ProAssist. We receive the Stripe account ID and the payment status. If you are a helper with a payout account, we additionally store that account's IBAN, bank and account holder name as well as your invoicing address, because the Danish Bookkeeping Act and the DAC7 reporting require it.
  • Location data: GPS position when tasks are created, when applying, and during live tracking of ongoing tasks.
  • Communication: Chat messages sent via the platform's messaging system.
  • Technical data: Device type, OS version, push notification tokens (Firebase and Apple).
  • CPR number and MitID details: Name, date of birth and CPR number (Danish national ID number) received from MitID when you log in.
  • Identity documents, driving licences and certificates: Images of the documents you upload yourself when your identity, your driving licence or your qualifications need to be confirmed.
  • Invoicing address: The address you enter yourself as a task poster so that it can appear on the invoice. If you do not enter one, the task's address appears on the invoice as the delivery address.

Once a task has been paid, we issue an invoice in the helper's name. The helper's name and address and any VAT number appear on it as the seller, and the task poster's name and address appear as the buyer. Both parties can view and share the invoice in the app.

Purposes of the processing

  • Creating and administering your user account.
  • Matching tasks between task posters and helpers.
  • Payment handling via Stripe Connect.
  • Displaying tasks and users on maps (Google Maps / Mapbox).
  • Live tracking of ongoing tasks.
  • Sending push notifications about tasks and messages.
  • Preventing abuse and safeguarding the integrity of the platform.
  • Automated assessment of free text, CVs, identity documents, driving licences and certificates, translation of messages, automated answers to simple support questions, and voice conversations with the task assistant
  • Bookkeeping and the annual reporting of helpers' earnings to the Danish Tax Agency (DAC7).
  • Issuing invoices in the helper's name and on the helper's account.

Legal basis

  • Performance of a contract (GDPR art. 6(1)(b)): Processing that is necessary in order to provide our services to you.
  • Legitimate interests (GDPR art. 6(1)(f)): Preventing fraud and abuse and improving our platform.
  • Consent (GDPR art. 6(1)(a)): Push notifications and location data require your explicit consent.
  • Legal obligation (GDPR art. 6(1)(c)): The Danish Bookkeeping Act's requirements for retaining accounting records, and platform operators' duty to report helpers' earnings annually to the Danish Tax Agency (DAC7).
  • CPR number (Danish Data Protection Act § 11(2)): Processing of your CPR number for the purpose of unique identification.

Third-party services

ServiceProviderPurposeLocation
Database & authSupabase Inc.User profiles, task data, chatEU (Ireland)
PaymentsStripe Inc.Payment processing via Stripe ConnectEU / USA (SCC)
Push notificationsGoogle (FCM)Notifications about tasks and messagesEU / USA (SCC)
Maps & geocodingGoogle Maps / MapboxDisplaying tasks on mapsEU / USA (SCC)
Web statisticsGoogle Ireland Ltd.Visitor statistics on proassist.dk (only with consent)EU / USA (SCC)
Ad measurementMeta Platforms Ireland Ltd.Measuring the effect of ads (only with consent)EU / USA (SCC)
AI assessment and translationOpenAIAutomated assessment of free text, CVs, identity documents, driving licences and certificates, translation of messages, automated answers to simple support questions, and voice conversations with the task assistantEU / USA (SCC)
MitID loginCriipto / IduraVerification of your identity via MitIDEU (Denmark)
Push notifications (iOS)Apple Inc.Delivery of notifications via the Apple Push Notification serviceEU / USA (SCC)
Ad measurement (iOS)Apple Inc.Apple Search Ads and AdServices — measuring the effect of ads (only with consent)EU / USA (SCC)
Ad measurementTikTok Technology Ltd.Measuring the effect of ads (only with consent)EU / USA (SCC)
Vehicle lookupMotorAPILooking up vehicle data from the number plate (carpooling)EU (Denmark)
CVR lookupapicvr.dkLooking up company details from the CVR numberEU (Denmark)
Web hostingVercel Inc.Operation of proassist.dk and the admin portalEU / USA (SCC)
VAT number checkVIESChecking the VAT and CVR number in the EU VAT register (VIES)EU (European Commission)

All third-party providers outside the EU/EEA operate under the EU Standard Contractual Clauses (SCC).

CPR number

When you log in with MitID we receive and store your CPR number. We use it to identify you uniquely, so the same person cannot appear as several users. If a user is excluded from the platform we also store the CPR number as an irreversible hash that cannot be converted back into the number — solely to prevent the excluded person from returning under a new name. If you delete your account yourself, we keep the same kind of hash of the CPR number together with your MitID ID and your name for two years, so a person who has misused the platform can still be excluded and cannot sign up again. The data is used for nothing else and is deleted automatically after two years.

The processing takes place under § 11(2) of the Danish Data Protection Act. Your CPR number is never shown to other users, never appears in profiles, chats, tasks or reviews, and is not disclosed to anyone other than public authorities where the law requires it.

Identity documents, driving licences and certificates

If your identity has to be confirmed — for example if your name is protected in the Danish civil registry — or if you want to document a driving licence or a course certificate on your profile, you upload an image of the document yourself. The image is sent to OpenAI for automated assessment, which reads the document type, the name and the dates, and is then reviewed by a human on our side: always for identity checks, and for driving licences and certificates whenever the automated assessment is in doubt.

Identity documents you upload to have your name confirmed are deleted as soon as the review is finished — whether the outcome was approved or rejected. All that remains is the decision: what was approved or rejected, by whom and when.

Driving licences and certificates that you document on your profile are, by contrast, kept for as long as they are shown there. They are deleted when you remove them yourself, when a new driving licence replaces the old one, and when you delete your account. If an uploaded document contains sensitive data — a criminal record certificate, for example — the image is deleted immediately and only the reason for the rejection remains. Other users never see the document itself, only that it has been approved.

Support assistant

When you write to support in the app, an automated assistant answers simple questions based on our public help pages. The assistant only sees what you yourself write in the case, the case subject and the task's title and status — never payment details and never the images you attach. The text is sent to OpenAI, which generates the answer (see data processors). Anything about money, complaints, reports, suspensions and bugs always goes to a person, and you can tap Talk to a person at any time. Decisions that affect your account or your money are always made by a person.

Voice conversation with the task assistant

If you choose to talk to the task assistant in the app instead of typing, the audio from your microphone is sent to OpenAI while the conversation lasts. OpenAI turns your speech into text and answers with an AI-generated voice. The conversation only starts when you tap the button yourself, and the first time you are told that your voice is sent to OpenAI. We do not store audio recordings. What is said is saved as text in the chat, just as when you type, and is used to describe your task. You can always type instead (see data processors).

Retention period

We retain your personal data for as long as your account is active. When your account is deleted, your personal data is removed within 30 days — except for the data legislation requires us to keep longer. In addition we delete on an ongoing basis:

  • Chat images and support attachments: Deleted automatically 90 days after the image was sent or the support case was closed. The message remains, but the image is gone.
  • Unpaid tasks: Tasks that were never paid for are deleted automatically — finished and expired postings after 7 days, tasks that never found a helper after 30 days, and archived tasks after 90 days.
  • Paid tasks, documents and bookkeeping: Tasks with a payment, the invoices and credit notes we issue, and the associated accounting entries are kept for 5 years after the end of the financial year they relate to, as the Danish Bookkeeping Act requires. The short deletion rules above therefore do not apply to paid tasks, only to postings that were never paid.
  • Reporting to the Danish Tax Agency (DAC7): As a digital platform we must report helpers' earnings to the Danish Tax Agency every year. The data included in that report, including name, address, CPR or CVR number and the payout account's IBAN and bank, is kept for as long as tax legislation requires and is therefore not deleted together with your account.
  • Identity documents: The document itself is deleted once the review is finished. Only the decision is kept.
  • Driving licences and certificates: Kept for as long as they are shown on your profile. They are deleted when you remove them yourself, when a new driving licence replaces the old one, or when you delete your account.
  • Traces of deleted accounts: When you delete your account, we keep an irreversible hash of your CPR number, your MitID ID and your name for two years — solely so that a person who has misused the platform can be excluded and cannot sign up again. After that they are deleted automatically.

Your rights

You have the following rights under the GDPR:

  • Right of access: The right to access your personal data.
  • Right to rectification: The right to have inaccurate data corrected.
  • Right to erasure: The right to have your data deleted ("the right to be forgotten").
  • Right to restriction: The right to restrict the processing.
  • Right to data portability: The right to receive your data in a structured, machine-readable format.
  • Right to object: The right to object to processing based on legitimate interests.

Contact us via Contact to exercise your rights. We respond to enquiries within 30 days.

Right to complain

You can lodge a complaint with the Danish Data Protection Agency (Datatilsynet):
Datatilsynet · Carl Jacobsens Vej 35 · 2500 Valby
www.datatilsynet.dk