Terms and conditions
Last updated 22 October 2026.
These terms govern your use of virksomhed.app, the Virksomhed apps on its subdomains, and your account at id.virksomhed.io. By using the services, you accept these terms. If you use them for a business, you accept them on the business's behalf, and "you" then also means the business.
Who we are
Jonatan Pedersen ApS runs Virksomhed, CVR 46605101, Elmegade 20, 1. mf, 2200 København N, Denmark. You can write to us at hello@jonatanpedersen.com.
Your account
You get an account when someone invites you. The same account works in every Virksomhed app. You keep your details correct, keep your password and passkeys secret, and write to us at once if you think someone else has gained access to your account.
Using the services
You may use the services for lawful purposes in your business. You may not:
enter content you have no right to, or that is unlawful,
try to access other people's accounts or data,
disrupt, overload, or get around the services' security, or
resell the services without an agreement with us.
If you break these terms, we can suspend or close your account. We tell you first, unless the breach is serious or the law prevents it.
Your content
What you enter in the apps is yours. You give us the right to store, process, and show it to the extent we need to provide the services to you and to the people you share it with. We use it for nothing else.
Price
We do not charge for the apps today, unless a written agreement with you says otherwise. If we start charging, we tell you in good time, and you decide whether to continue.
Availability and changes
We do our best to keep the services working and available, but we provide them as they are and promise no particular uptime. We develop the apps continuously and can change, add, or remove features. If we remove an app, we tell you at least 30 days ahead, so you can get your data out.
Liability
To the extent the law permits, we are not liable for indirect loss, such as lost revenue, lost profit, or lost data, and our total liability to you is at most what you have paid us in the past 12 months. This limit does not apply if we acted intentionally or with gross negligence.
Termination and deletion
You can close your account at any time by writing to us. We can end the service for you with 30 days' notice. When an account closes, we delete your data within 30 days, except what the Danish Bookkeeping Act requires us to keep and the security log that the privacy policy describes. If you want a copy of your data first, write to us before the account closes.
Data processing
This section is the data processing agreement between you as controller and Jonatan Pedersen ApS as processor under Article 28 of the General Data Protection Regulation. It covers the personal data you enter in the Virksomhed apps.
Subject, duration, nature, and purpose
We store and process personal data to provide the apps you use. The agreement applies for as long as we process personal data for you and ends when we have deleted or returned it.
Categories of data and data subjects
Data subjects: your clients and their contacts, your consultants and employees, and anyone else you record in the apps.
Data: names, email addresses, phone numbers, hourly rates, engagements, logged hours, amounts, and anything else you write in the apps. The apps are not meant for special categories of data under Article 9 or 10, and you do not enter them.
Instructions
We process the data only on your documented instructions. These terms and what you do in the apps are those instructions. If we believe an instruction breaks data protection law, we tell you at once. If EU or Danish law requires us to process the data in another way, we tell you first, unless the law forbids it.
Confidentiality
Only people who need access to provide the services have access to the data, and they are bound by confidentiality.
Security
We protect the data under Article 32. Among other things, we:
encrypt all traffic with TLS,
store passwords as scrypt hashes and support passkeys and two-factor authentication,
grant access to data only by account, organization, and permission,
record security events in a log that nobody can change after the fact, and
host everything in the EU.
Sub-processors
You give us general authorization to use sub-processors. The sub-processors page lists them. Before we start using a new one, we write to you at least 30 days ahead, and you can object. We impose the same data protection obligations on each sub-processor that we have under this agreement, and we remain liable to you for them. We transfer no data to countries outside the EU and EEA without your prior written instructions.
Assistance
We help you answer requests from data subjects who exercise their rights, and with your obligations under Articles 32 to 36: security, breach notification, impact assessments, and prior consultation. If a data subject writes to us directly, we pass the request on to you.
Personal data breaches
If we discover a personal data breach that affects your data, we notify you without undue delay and no later than 48 hours after we became aware of it. The notice includes what we know about the breach, its consequences, and the measures we have taken.
Deletion and return
When the agreement ends, we delete the data within 30 days. If you ask before then, we give you a copy first. We keep data beyond that only if EU or Danish law requires it.
Documentation and audits
We give you the information you need to show that we comply with Article 28, and we allow for and contribute to audits and inspections that you, or an auditor you appoint, carry out with reasonable notice.
Privacy and cookies
The privacy policy explains how we handle your personal data when we are the controller, and the cookie policy lists the cookies we use.
Governing law and venue
Danish law governs these terms, and the Copenhagen City Court (Københavns Byret) decides any dispute about them in the first instance. If you are a consumer, you keep the protection that the mandatory law of your country gives you.
Changes
We may update these terms. If a change is significant, we write to you at least 30 days before it takes effect. We revise the date at the top whenever we update the terms.