Privacy notice

Who is responsible

The data controller is Logic Unknown ApS, CVR 40560483, Humlevej 20, 8543 Hornslet, Denmark.

What we collect and why

• Partner applications: company details, contact name, work email, phone, role and the information you give about your business. We use it to assess your application and to reply to you. Legal basis: steps prior to entering into a contract and our legitimate interest in running a partner program.
• Partner portal accounts: name, work email, role in your team, the Microsoft account identifier used to sign in, sign-in times, and the deal registrations and quote requests your team submits, including the customer names and domains you enter. We use it to provide the portal, to manage the partnership and to process deals. Legal basis: performance of the partner agreement.
• Signed documents: when you sign a document in the partner portal (for example the partner agreement or an NDA) we store the document, the signed PDF and the signature evidence: your typed name, email address, organisation and role, the Microsoft account identifier you signed in with, the time, your IP address, your browser (user agent), your consent to sign electronically and a fingerprint (SHA-256) of the document. We also record when the document was sent, viewed, signed, countersigned, declined or withdrawn. This evidence is printed on a signature certificate page in the signed PDF, which both parties receive by email, so the certificate shows each signer's name, email address, organisation, Microsoft account identifier, IP address and browser to both parties and to anyone they share the PDF with. We use it to conclude and document agreements with you and to prove them if needed. Legal basis: performance of the partner agreement and our legitimate interest in being able to document and defend agreements. The public verification page only receives a fingerprint and an envelope id, never the file, and returns no personal data.
• Contact form: name, company, email, country and your message. We use it only to answer your enquiry. The message is forwarded to our inbox and not stored on the website.
• Security records: a log of changes made in the portal and admin console (who did what and when, including names and email addresses of the people involved) to keep the service secure and accountable.
• Abuse protection: to limit misuse of the application form, the document verification page and invitation emails we keep short-lived counters based on a keyed one-way hash of the email address or network address (for IPv6, the network prefix).

How long we keep it

• Pending and rejected applications are deleted 12 months after they were submitted.
• Approved applications, partner accounts, team members and deals are kept while the partnership is active. When the partnership ends and we delete the partner account, its application, team members, invitations and deals are deleted with it, unless we must keep records for accounting or legal reasons. Signed documents are kept as described below.
• Signed documents (completed agreements) are kept while the partnership is active and for 5 years after we delete the partner account, as evidence of the agreement. When the partner account is deleted we keep only the signed PDF and its signature record.
• Documents that were declined, withdrawn or not signed before they expired are deleted, with their files, 12 months after that happened. A document you signed that we have not countersigned within 90 days expires and is then deleted the same way. If a partner account is deleted while a document waits for our countersignature, the document and your signature record are kept as withdrawn and deleted 12 months later.
• Invitation records are deleted 30 days after the invitation was created. Invitation links themselves stop working after 7 days or when used.
• Security log entries are deleted after 24 months.
• Abuse-protection counters are deleted after 2 days.
• Removed team members lose access immediately. Their name and email stay in the partner record while the partnership is active, and in the security log for up to 24 months.

Deletion runs automatically as part of routine administration of the partner program.

Who processes it for us

• The website and API are hosted on Microsoft Azure in the West Europe region (Netherlands). Application, partner, deal and signed-document data is stored in Azure Storage in West Europe.
• Emails are sent with Azure Communication Services with data location Europe.
• Sign-in to the partner portal uses your Microsoft account through Microsoft Entra ID.
• The application, contact and document verification forms are protected by Cloudflare Turnstile. To tell people from bots, Cloudflare processes your IP address and signals from your browser. Cloudflare, Inc. is based in the United States, so this can involve a transfer of personal data outside the EU.

We do not sell personal data and we do not use tracking or advertising cookies. The only cookie we set is the sign-in session cookie for the partner portal.

Your rights

You can ask for access to, correction of, or deletion of your personal data, ask us to restrict processing, object to processing based on our legitimate interest, and receive your data in a portable format. You can also complain to the Danish Data Protection Agency (Datatilsynet).

Contact

To exercise your rights or ask about this notice, use our contact form.

Last updated 24 October 2026.