Privacy Policy

Last updated: 10 June 2026

This Privacy Policy explains how fortea (CVR 34445605), Vestergade 15A, 5000 Odense C ("we", "us") processes personal data when you use Cladis (the "Service"). We are the data controller for the account and usage data described below. For files you upload that contain other people's personal data, see "Files you upload" — for those, you are the controller and we act as your processor.

1. Data we process

Account data

Your email address and a securely hashed password. We never store your password in plain text.

Files you upload

Files you submit are processed only to compute similarity results. They are retained in storage while the related analysis job exists, so you can review match evidence, and are permanently deleted when you delete the job; uploads never attached to a job are automatically deleted within 30 days. We do not use your files to train any model. If your files contain personal data about third parties (for example student submissions), you are the data controller for that data and we process it on your behalf, under these terms, solely to provide the Service. We recommend you anonymize filenames and remove identifying metadata before uploading.

Job and usage data

Metadata about your analysis jobs (such as file counts, timing, and the computed results), API keys (stored only as a secure hash), and limited technical logs (including IP address) used to operate and secure the Service.

Billing data

Payments are handled by our Merchant of Record, Paddle.com Market Limited ("Paddle"). We do not receive or store your full card details. Paddle shares limited data with us such as your email, country, and subscription status to manage your plan.

2. Why we process it, and our legal basis

• To provide the Service and your account — performance of our contract with you (GDPR Art. 6(1)(b)).
• To bill you and manage subscriptions — performance of contract and compliance with legal obligations (Art. 6(1)(b),(c)).
• To secure, maintain, and improve the Service and prevent abuse — our legitimate interests (Art. 6(1)(f)).
• Where required, on the basis of your consent (Art. 6(1)(a)).

3. Service providers (processors)

We share data only with providers that process it on our behalf to run the Service:

• Paddle.com Market Limited (Paddle) — payments and billing, as Merchant of Record.
• Our cloud hosting and database provider — to run the application.
• Our object-storage provider — to temporarily hold uploaded files during a job.

Where a provider processes data outside the EU/EEA, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses as a safeguard.

4. Retention

• Uploaded files: kept while the related job exists; permanently deleted when you delete the job. Uploads never attached to a job are deleted within 30 days.
• Job results and account data: kept until you delete the job or your account.
• Billing records: kept as required by applicable accounting and tax law.

5. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability and to withdraw consent. To exercise these rights, contact contact@cladis.io. You also have the right to lodge a complaint with Datatilsynet (the Danish Data Protection Agency), datatilsynet.dk.

6. Security

We protect data in transit with encryption, store passwords and API keys only as secure hashes, and permanently delete uploaded files when you delete a job. No method of transmission or storage is completely secure, but we take reasonable measures appropriate to the risk.

7. Cookies

We use only the cookies and local storage necessary to keep you signed in and to operate checkout (via Paddle). We do not use advertising or third-party tracking cookies.

8. Children

The Service is intended for educators, professionals, and organizations, not for use directly by children. If you analyze work produced by minors, anonymize it and ensure you have a lawful basis to process it.

9. Changes

We may update this Policy; the "Last updated" date reflects the latest version. See also our Terms of Service.

10. Contact

Privacy questions or requests: contact@cladis.io.