Privacy notice
Version privacy-v2 · Last updated 11 September 2026
This notice covers mikekrohn.ai, the AI Workflow Assessment, the AI Workflow Session, and enquiries about an engagement scoped in a written proposal. Every system named below is one we actually use — nothing here describes a system we do not run.
1. Who is responsible
The data controller is Krohn AI Advisory, CVR-nr. 46665074, c/o Mike Krohn, Rialtovej 5, 2300 København S, Denmark. For anything in this notice, write to contact@mikekrohn.ai or call +45 31 54 28 95.
2. What we collect
From the assessment intake form:
- Required: your email; company or website; and your consent to be contacted about the assessment.
- Optional: name, role, team size, and, if you tick it, your request that we start before your 14-day withdrawal period ends.
From the AI Workflow Session form:
- Required: your email; a description, in your own words, of the task you want sorted; and your consent to be emailed about the session. No company is asked for.
- Optional: your name, what you have already tried, and which tools you already pay for.
From the enquiry form for a scoped engagement:
- Required: your work email; your company; a description of the work you want changed; and your consent to be emailed about the enquiry.
- Optional: your name and roughly how many people you are.
Recorded with every submission, whichever form it came from: an assessment ID, a timestamp, which of the three the submission belongs to, a status, the schema version, and the versions of the consent text, the terms of service, and this notice that were in force when you submitted.
Two of those forms ask you to describe your work in your own words, and what you write is stored in the same record as the rest of your answers and deleted on the same schedule. Please keep them to the work itself: do not put personal data about your employees, clients, family or anyone else, health or financial details, or anything else sensitive into any field — including the free-text boxes, and including the name and role fields.
From any call — the assessment’s working session and review call, an AI Workflow Session, or an introductory meeting — a recording and/or transcript, and only with your prior consent asked for that call. Without it: written notes.
From payment: your assessment ID, the checkout session ID, which offer you bought, a deduplication key, your email, the amount, the currency, and the payment timestamp. Card details never reach us.
From the newsletter: your email address, and only if you subscribe yourself. Assessment clients are never subscribed automatically.
3. Where your data goes
| Data | System | Why |
|---|---|---|
| Intake submission | Vercel → Google Apps Script → Google Sheets, and/or Vercel → Resend | The intake reaches us: as a row in our operating workbook, as an email to us, or both, depending on how the site is configured. Resend is an email-delivery provider and is only a relay — it is not a place we keep your data |
| Booking | Google Calendar | Scheduling any call: the assessment’s working session and review call, an AI Workflow Session, or an introductory meeting |
| Calls | Google Meet | The sessions themselves; transcription only with your consent |
| Notes, recordings, transcripts, consent records, an assessment brief, a written proposal | Google Drive | A private folder per client |
| Payment | Stripe | An independent payment processor. Stripe handles your card data under its own terms; we receive only the metadata listed above |
| Newsletter (subscribers only) | Buttondown | Newsletter delivery |
| Operating Sprint work | Your own tools and accounts | During a sprint we work inside your systems, not ours. What we access and where it goes is set out in the written agreement for that sprint, and a data processing agreement is signed where the law requires one |
If the structured intake endpoint is unavailable, the form falls back to opening your own email program with the intake text pre-filled. It then reaches us as ordinary email, from your account.
We do not sell your data, and we do not put client-identifiable material into public repositories or shared knowledge bases.
4. AI-assisted analysis
We openly use AI-assisted analysis: notes or transcripts are analysed with AI tools under our control — to produce an assessment brief, to work through a task with you on an AI Workflow Session, or to scope a written proposal. Three rules govern it, whichever of the three you are in.
- Material is de-identified before any external AI model service sees it.
- Raw transcripts and client-identifiable data stay in your private client folder, never in public repositories or shared knowledge bases.
- Whatever you tell us must not enter an AI system — stated in the assessment intake, which asks for it, or said on a call — is respected in the analysis itself, not only in the recommendations.
5. Recording and transcription
No call is recorded or transcribed without your explicit consent. We ask in the booking confirmation and confirm again at the start of the call, before any recording begins. If you decline, the session runs on written notes instead — declining costs you nothing and changes nothing about what you receive.
Recordings and transcripts are stored in your private client folder and used only to produce your assessment brief.
6. Legal bases
- Delivering what you bought — the assessment (intake, scheduling, analysis, the brief, the review call) or the session (the form, the confirmation, the call): performance of a contract.
- Handling an enquiry about a scoped engagement that never becomes one — the form, the introductory meeting, and the written proposal: our legitimate interest in answering people who ask us to quote for work. You can object at any time and we will delete the enquiry.
- Recording and transcription, the newsletter, and contacting you about whichever of the three you asked about: your consent, which you can withdraw at any time.
- Keeping payment and accounting records: a legal obligation.
7. How long we keep it
- Recordings and transcripts of the assessment’s calls: deleted within 30 days of you approving your brief.
- Recordings and transcripts of any other call: deleted within 30 days of the call.
- Intake, session and assessment records: three years.
- Enquiries about a scoped engagement that did not become one: deleted within 12 months, or sooner if you ask.
- Payment and accounting records: five years, as Danish bookkeeping law requires.
You can ask us to delete your data at any time by writing to contact@mikekrohn.ai. We delete everything we are not legally required to keep, and we tell you when it is done.
8. Your rights
You have the right to see the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we process it, to receive a copy in a portable format, and to withdraw any consent you have given. You can also complain to the Danish Data Protection Agency, Datatilsynet.
9. Learning from the work
Approved, anonymised lessons from real work — an assessment, a session, or a scoped engagement — may inform our published writing and improve how we do it. Anonymised means no names, no identifiable details, and nothing that could reasonably be traced back to you. Anything identifiable needs your separate written permission first.
10. Versions
This notice carries a version (privacy-v2) and a date. We record which version was in force when you submitted your intake.