Privacy and security contact.
This notice covers this website. Data processed inside the FileHero product on behalf of a customer is governed by the data processing agreement with that customer, not by this page.
What this site collects
Nothing, by default. filehero.dk sets no cookies, runs no analytics, embeds no tracking pixels, and loads no third-party fonts or scripts on page load. Fonts, styles, and images are served from our own domain.
Our web server keeps standard access logs (IP address, timestamp, requested path, user agent) for security and abuse investigation. The legal basis is our legitimate interest in operating the site securely (GDPR Article 6(1)(f)). Logs are retained for 30 days and then deleted.
The booking widget
The "Book a demo" button opens a calendar supplied by Cal.com, served from the EU endpoint cal.eu. The widget script is requested from app.cal.com only at the moment you move to or activate a booking button. If you never do, your browser makes no request to Cal.com at all.
Once it loads, Cal.com receives your IP address and browser information, and receives whatever you enter into the booking form: typically name, email address, and any note you add. Cal.com acts as our processor for that booking. We use the booking details to prepare and hold the meeting, on the basis of taking steps at your request before entering a contract (Article 6(1)(b)). Booking records are retained for 24 months after the meeting, unless you ask us to remove them sooner.
If you write to hello@filehero.dk, we process your address and the content of your message to answer you, on the basis of legitimate interest in responding to enquiries (Article 6(1)(f)). Correspondence is retained for 24 months.
Where data is processed
The website and our mail are operated within the EU. Cal.com is used via its EU endpoint. We do not sell data and do not share it for advertising. A current list of sub-processors is available on request from hello@filehero.dk.
Your rights
You can ask for access to your data, correction, erasure, restriction, portability, or object to processing based on legitimate interest. Write to hello@filehero.dk and we will respond within one month. If you are not satisfied, you may complain to the Danish Data Protection Agency, Datatilsynet.
Reporting a vulnerability
Send security reports to hello@filehero.dk. Our machine-readable contact is at /.well-known/security.txt.
We acknowledge reports within three working days and will keep you updated until the issue is closed. Please give us reasonable time to remediate before disclosing publicly. Do not access, alter, or exfiltrate data that is not yours, do not degrade the service, and do not run automated scanning that generates significant load. We will not pursue legal action against researchers who follow these terms in good faith. We do not currently run a paid bounty programme.
Changes
If this notice changes materially, the date at the top of this page changes with it.