Privacy policy

Controller: Otonom (trading as OpenAjan), CVR 46779274, Lyngbyvej 83A, 2100 København Ø, hej@openajan.com.

1. What we collect

Merchants: name, address, phone, email, opening hours, menu/prices, company number (if given), login codes, order history.
Customers (via AI agents): name, phone, email (optional), order contents, requested time, note, which agent placed the order, technical logs (IP, time).

2. Purposes and legal basis

Showing the shop to customers and AI agents, relaying orders/bookings to the shop, sending confirmations, billing the merchant fee, preventing abuse, meeting legal duties. Basis: contract (GDPR art. 6(1)(b)), legitimate interest in operation and security (6(1)(f)), legal obligation (6(1)(c), bookkeeping).

3. Roles

For merchant data Otonom is controller. For customer data inside an order the merchant is controller and Otonom is processor under a data processing agreement (see tab).

4. Recipients

The shop you order from. Processors: Simply.com (hosting and email, Denmark), SMS provider (GatewayAPI, EU) and payment provider (Stripe) if enabled. The AI agent (e.g. ChatGPT, Claude) is an independent controller of your conversation. We never sell data and show no ads.

5. Retention

Order records: 5 years (Danish Bookkeeping Act). Customer details in orders: deleted/anonymised after 12 months unless law requires longer. Merchant data: while the shop exists + 5 years for accounting data. Logs: 90 days.

6. Your rights

Access, rectification, erasure, restriction, portability and objection — write to hej@openajan.com. You may complain to Datatilsynet (datatilsynet.dk). Merchants can delete their shop any time in the panel.

7. Cookies

Only strictly necessary cookies (session/login, CSRF). No tracking, no third-party cookies.

8. Transfers outside the EU

Data is processed in the EU. If an AI agent outside the EU places an order, that happens under the agent's responsibility and your choice of agent.

Last updated: 17. september 2026.