Privacy Policy
Updated May 20, 2026
Privacy Policy
1. GENERAL INFORMATION
This document ("Privacy Policy") concerns Evertrace ApS, CVR no. 44551101 with registered address at Langebrogade 6v, DKK-1411, Copenhagen C ("Evertrace," "we," or"us") and sets out Evertrace’s policy regarding the collection and processing of personal data when we act as data controller. This Privacy Policy covers the processing of personal data that takes place when you are a customer of ours, are part of our services, or contact us.
The Privacy Policy describes the purposes and legal basis for our processing of your personal data in accordance with the General Data Protection Regulation (GDPR), and unless otherwise stated, this Privacy Policy uses definitions of terms as set out in the GDPR.
Evertrace is the data controller for the processing of personal data, and can be contacted at:
- Email:contact@evertrace.ai.
2. PROCESSING OF PERSONAL DATA FOR CUSTOMERS
2.1. When you are a customer, we process the following information about you:
- Name of contact person(s)
- E-mail of contact person(s)
- Your activity on our platform
2.2. We process your personal data to administer a customer relationship, including offering our products or services and execute any contracts with you, as well as addressing your queries, and manage your account as a customer. We process your activity on our platform to ensure that the platform functions optimally.
2.3. The processing is necessary for the performance of a contract with you or for carrying out measures prior to entering into a contract. The processing is therefore carried out pursuant to Article 6(1)(b) of the General Data Protection Regulation. The processing of your activity on the platform is based on a legitimate interest in ensuring that our platform functions optimally. The processing is therefore carried out in accordance with Article 6(1)(f) of the General Data Protection Regulation.
2.4. We store your personal data until there is no longer a legitimate purpose for continued storage and no longer than 5 years after the end of the customer relationship.
3. PROCESSING OF PERSONAL DATA AS PART OF OUR SERVICE
3.1. When you are a part of our service as a start-up or similar, we process the following information about you:
- Name of contact person(s)
- E-mail of contact person(s)
- Any other information that you have made public yourself
3.2. We process your personal data to share your publicly available data, which you have chosen to make public on various public platforms, with our clients who have an interest in such data, primarily for investment related purposes.
3.3. The processing is based on a legitimate interest in processing data that you have made public in order to provide our services to our customers. The processing is therefore carried out in accordance with Article 6(1)(f) of the General Data Protection Regulation. Processing of your publicly available data is an intrinsic and thus a necessary part of delivering our services to our customers. We perform these processing activities on the basis of a Legitimate Interests Assessments (LIA) in which we have assessed our interest in performing the processing activities against your interests as a data subject. You can contact us if you have any questions about our LIA or if you want to exercise your right to opt out (see below).
3.4. The personal data is collected from a variety of publicly available sources, where you have made it public yourself. Alternatively, we have implemented a feature that allows individuals to request inclusion on the platform through a “Get Discovered” survey.
3.5. We store your personal data until there is no longer a legitimate purpose for continued storage.
4. PROCESSING OF PERSONAL DATA WHEN CONTACTING US
4.1. When you contact us, we process the following information about you:
- Name
- Any personal data contained in your message
- Where relevant, your image in connection with a web conferencing
4.2. We process your personal data to ensure that interested customers or others can get in touch with us.
4.3. The processing is based on a legitimate interest in being able to contact customers and others. The processing is therefore carried out in accordance with Article 6(1)(f) of the General Data Protection Regulation.
4.4. We store your personal data until there is no longer a legitimate purpose for continued storage.
5. RECIPIENTS OF PERSONAL DATA
5.1. We may disclose your personal data to relevant recipients such as:
- Service providers (IT, marketing, customer support, legal, payment processing).
- Customers interested in publicly shared data.
- Legal and regulatory authorities, when mandated.
5.2. We may transfer personal data to recipients outside the EU/EEA. If the recipient is located outside the EU/EEA the transfer will be based on a legal basis for the transfer. If you would like an overview of third country transfers and the basis for them, please contact us.
5.3. Our website may include links to third-party sites (e.g. news websites) and social media features, which are governed by their own privacy policies.
6. PROFILING
6.1. Our processing activities involve profiling in the sense that based on the information we collect we may create a profile of each data subject, which we include when we provide our services to our customers. While we do not make anydecisions based on the profile we create, the profile may be shared with our customers, who may include them in the basis of their decision-making.
6.2. You have the right to not be subject to profiling. If you do not want to be the subject of our profiling, you may exercise your right to opt out. You can request the deletion of your data or opt-out of its sale by contacting us through our “Opt out page”, here https://www.evertrace.ai/opt-out. Requests to opt-out must provide sufficient information for verification. If represented by an agent, their authorization and identity verification are required.
7. EVERTRACE PROPRIETARY SCORING SYSTEM
7.1. For easy reference for Evertrace’s customers, Evertrace has developed a proprietary scoring system that estimates how strong a potential founder profile is. Evertrace uses profiling as part of the scoring system. The profiling involves the automated processing of public data and is designed to assist Evertrace’s customers in making informed decisions. Given that the information provided tothe processing systems is as narrowly defined as possible, bias should be less of an issue, and the output is force structured to a pre-defined set of out put minimizing the risk of hallucinations. It is important to note that Evertrace’s profiling activities do not involve automated decision-making that produces legal or similarly significant effects on individuals, see below for a further explanation.
7.1.1. Our AI model analyses publicly available data. It only uses data that individuals have voluntarily made public and does not process any private or sensitive information. The model collects and analyses data to identify patterns and compare them against predefined criteria, this feeds into our own models that generates a score that serves as one element in a broader evaluation conducted by our customers. The weights in our own models are specified and defined by the Evertrace team explicitely. The purpose is to streamline processes like founder identification by providing objective, data-driven insights, while final decisions are always made by humans, employed by our customers, e.g.Investment Analysts.
7.1.2. This assessment evaluates whether AI-based profiling of publicly available data constitutes automated decision-making with legal or significant effects under GDPR Article 22 and examines its intrusiveness on individuals' rights and freedoms. The profiling that feeds into our proprietary scoring generator is based on Public Data but does not independently determine outcomes, serving only as one of many factors in broader human-led evaluations. Since decisions are not solely based on profiling, it does not qualify as automated decision-making with significant effects. The data, voluntarily published,aligns with GDPR’s legitimate interests basis, as individuals reasonably expect their publicly available information related to new and/or potentially new company formations to be accessed for company evaluation purposes. The profiling uses public, non-sensitive data and avoids discriminatory or stigmatizing outcomes, ensuring compliance with GDPR principles of fairness and transparency.
7.1.3. AI-driven profiling poses potential risks, including discrimination if algorithms are biased, stigmatization through harmful stereotypes, loss of autonomy when decisions are made without human oversight, and privacy violations if sensitive data is improperly handled. To counteract this, we have created our own models with specified weights to reduce risk of inherent bias in external model's training dataset which can be difficult to ascertain due to their “blackbox”approach.
8. YOUR RIGHTS
8.1. You are entitled to:
- Request access to and further information about the processing of your personal data
- Request that we correct, rectify, complete, or delete the processing of your personal data.
- Have the processing of your personal data restricted if: i) you have contested the accuracy of the personal data, ii) the processing is unlawful and you have requested a restriction there of, iii) we no longer need your personal data for the original purpose, but we require it to establish, exercise, or defend legal claims, or iv) an assessment of which consideration outweighs the request for erasure is ongoing.
- Where our processing is automated and based on consent or the performance of a contract, you have the right to data portability. Data portability means that you can receive the personal data you have provided us with in a structured,commonly used, and machine-readable format, and that you have the right to transfer the personal data to another data controller.
8.2. If you wish to complain about our processing of your personal data, please submit your complaint to the Danish Data Protection Agency. You can read more about the options for complaining to the Danish Data Protection Agency here.
9. CHANGES
9.1. We reserve the right to change this Privacy Policy to ensure that it complies with applicable law or as a result of changes to our processing of personal data.
10. CONTACT INFORMATION
10.1. If you wish to exercise your rights or have questions regarding our processing of your personal data, please contact us using the contact information at the beginning of this Privacy Policy.