Privacy Policy for Customers

This is our Customer-specific Privacy Policy. We have a General Privacy Policy too, made for when we process your personal data for all other purposes.

NB: When you use our Software as a Service platform, e.g., Connie, and related services to process personal data on your own employees or signers, you are acting as a controller and we are acting as a processor. This is described in detail in section 2 and in our Data Processing Agreement.

1. Introduction and Scope

At Connie ApS (“we”, “us” or “our”), protecting your privacy as a Customer and the privacy of those receiving documents from you is very important to us.

This Privacy Policy explains what personal data we process about you as a Customer, the purposes and legal bases for processing, how long data is retained, who we share it with, our role as processor in certain scenarios, and your rights as a data subject. Our use of cookies is described in our cookie policy, and additional details about our security and compliance practices – including our certifications and sub-processors – are available in our Trust Center (accessible at trust.getconnie.com).

2. Connie as a Processor

2.1. When providing our Software as a Service solutions, i.e., Connie, we process personal data on your behalf as a processor. You are the controller for the personal data that you process with the assistance of our solutions. You can read more about this in our Data Processing Agreement.

2.2. You may import personal data into our services you have collected from signers or other individuals. The processing of personal data is based on your legal basis as the customer and you are responsible for making sure you have the necessary permissions for us to process personal data about signers or other individuals.

2.3. As part of our services, we log data whenever you and your signers access our services and when you/they perform key actions on documents in our services. This includes the notification emails we send to signers on your behalf, which contain a tracking element that registers when an email has been delivered and opened and when its links have been clicked. This data is used to create a “paper trail” on the documents you either create, issue, edit, sign or perform other similar actions on – shown to you as document activity, and forming part of the signature audit trail that documents, in the case of a dispute, that a signer received and viewed a document. Log data include things like email, IP address, timestamp, browser type and a cryptographic hash for the document.

2.4. We DO NOT use third-party services, such as Google Analytics and Facebook, to collect and analyze log data as part of our services to you as a processor.

2.5. We have implemented security measures to protect your data in our services. You can read more about our security measures in our Trust Center (accessible at trust.getconnie.com).

2.6. When your subscription or trial ends, the personal data we process on your behalf is handled through a defined retrieval and deletion process: your account enters a 30-day retrieval period with free export of your documents, after which the account and all associated data are permanently deleted and purged from backups within 30 days. The process is described in detail in Section 10 of our Terms & Conditions and in our Data Processing Agreement.

3. Elaboration of Our Specific Processing and Processing Bases

3.1. In connection with providing our Software as a Service platforms, e.g., Connie, and related services, to you as a customer, we process data about you as a contact person with our customer. We process your data in connection with the sale of our products in order to enter into and fulfil an agreement, cf. GDPR Article 6(1)(b). This data includes contact information such as name of contact person, profile picture, job title, company name, Company Registration No., VAT-code, email address, address and phone no., choice of subscription, purchase history and payment information.

3.2. In some cases, we may supplement our information about you with the information you regularly provide us with, e.g. information from email correspondence or social media, so that we can make our marketing as relevant as possible for you. This is done on the basis of our legitimate interest, cf. GDPR Article 6(1)(f), as we consider that our interest in offering you the best service outweighs your interest in not processing such general information that you provide us with.

3.3. From time to time you may receive emails related to your use of our services. Based on the personal data that you provide us, we may communicate with you in response to your inquiries to provide the services you request and to manage your account. We do this based on our legitimate interest, cf. GDPR Article 6(1)(f). If we have your consent, cf. GDPR Article 6(1)(a), we may also use your personal data to send you updates and other promotional communications. Every email will contain a link to be able to opt-out of receiving it. We may still send important messages regarding administrative matters, updates, disputes, and customer service issues that are required to provide the services based on our legitimate interest, cf. GDPR Article 6(1)(f).

3.4. We do not process or store your credit card information. Customer account owners enter their credit card information after the free trial period ends. This information, along with your billing address and company’s VAT no. is transferred to our third-party payment processor. This does not apply to enterprise licenses (where we invoice), educational licenses and partnership licenses. If you have privacy concerns around this, you can also opt in to receive invoices instead.

3.5. Contact information is stored for as long as we have a customer relationship with you as a customer, and is deleted no later than 3 years after the end of the customer relationship. Accounting material is deleted on an ongoing basis, but no later than 5 years from the end of the financial year to which the material relates, cf. section 12(1) of the Danish Bookkeeping Act.

3.6. At any time, you may log in and change your information or remove it in our provided services. You may decline to provide personal data to us, however, some of the personal data we ask you to provide, for example, the email address is mandatory to use our services. If you decline to provide it, we may not be able to provide our services to you.

4. Notification of Statutory or Required Processing

In cases where we process your personal data based on a legal obligation or contractual requirement or a requirement that must be fulfilled in order to enter into a contract, you are obliged to provide us with the information so that we can provide our services, fulfil the contract and invoice you for our services, etc. If you do not wish to provide us with the information we need to fulfil our obligations, the consequence may be that we will not be able to provide you with our services or fulfil a contract with you.

You are not obliged to provide us with your data in other cases, e.g. for our marketing. However, the consequence of not providing us with your data will be that you cannot receive marketing from us.

5. Transferring to Third-Party Companies

5.1. We will never sell, rent, or lease your personal data to a third party.

5.2. We process your personal data with confidentiality, and we generally do not disclose your information with third parties. However, we may further disclose your personal data if you have given your consent hereto or if we have a legitimate interest in the disclosure.

5.3. We may entrust your personal data to our system suppliers who process personal data on our behalf and according to our specific instructions in accordance with the data processing agreements we have entered.

6. Safety of Your Information

6.1. We take reasonable precautions, technical and organizational security measures to ensure a level of security appropriate to the risk. We are ISO/IEC 27001:2022 certified and follow industry best practices in order to protect your personal data from any unauthorized or unlawful breach of security that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to personal data and to preserve the security and confidentiality of the data. You can read more in our Trust Center at trust.getconnie.com.

7. Age of Consent

By using our services as customer contact, you confirm that you are at least 16 years of age.

8. Contact information

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please do not hesitate to contact us. Our contact details are:

Connie ApS
Company Registration No.: DK-42768294
Brandts Passage 15, 2.
5000 Odense C
Denmark

E-mail: You can write to us on the following email addresses:

  • privacy@getconnie.com – This is our dedicated contact for privacy and data protection inquiries.

  • support@getconnie.com – For general inquiries not related to privacy

9. Changes

We may update this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. If we make material changes, we will notify you by appropriate means before they take effect – for example by email to your account owner or a prominent notice in Connie. Minor changes, such as clarifications and corrections, take effect when posted on this page with an updated “last updated” date.

We will indicate the “last updated” date for this Privacy Policy. Below, we maintain a change log of significant updates for transparency.

Last updated: November 5th, 2026

Change Log:

  • November 5th, 2026: Clarified in section 2.3 that notification emails to signers include delivery, open and click tracking that feeds the document activity log and the signature audit trail. Added section 2.6 describing the retrieval and deletion process when a subscription ends, aligned with our Terms & Conditions (Version 6) and Data Processing Agreement. Added an end date for retention of contact information in section 3.5. Changed section 9 so that material changes to this policy are notified before they take effect. Updated the security section to reference our ISO/IEC 27001:2022 certification. Minor corrections of language and typos.

  • August 17th, 2025: Major simplification of the Privacy Policy to make it easier to read and understand. Included an easier distinction between us acting as a controller and a processor in section 2. Streamlined our description of our processing as a controller in section 3.

  • March 12th 2024: Company info updated. Connie ApS is now incorporated with VAT# DK42768294. Section 3.3 updated with new payment processor, Stripe, and the possibility to opt for invoicing is added. Various typos corrected throughout.