Privacy Policy

1. Data controller

TekstiAI Oy (Business ID 3343320-8)

Johanneksentie 15, 21410 Vanhalinna, Finland

Privacy contact: tommi@teksti.ai

2. What data we collect

We process the following personal data:

• Contact form submissions: name, email, organisation, message content.
• Demo booking data: name, email, and any additional info you provide via Calendly.
• Technical data and cookies: IP address, browser type, device identifier, and visitor analytics — only with your consent.
• Performance metrics: page load times and other technical telemetry (Vercel Speed Insights).

3. Purpose and legal basis of processing

• Responding to enquiries:consent or the controller‘s legitimate interest (GDPR Art. 6(1)(a) / (f)).
• Processing demo bookings: legitimate interest in managing our sales process.
• Visitor analytics: consent (GDPR Art. 6(1)(a)) — we request consent via the cookie banner.
• Technical operation of the site: legitimate interest — strictly necessary cookies do not require consent.

4. Sources of data

We collect data directly from you via forms, cookies, and demo bookings. We do not buy data from third parties.

5. Recipients and processors

We use the following sub-processors:

• Vercel Inc. — website hosting and performance telemetry
• Microsoft Azure — content management (Strapi CMS) and backend services
• Google Ireland Ltd. — Google Tag Manager and Analytics
• Usercentrics GmbH — cookie consent management
• Calendly LLC — demo scheduling

A Data Processing Agreement (GDPR Art. 28) is in place with each processor.

6. Transfers outside the EU

We aim to keep personal data within the EU/EEA. Some of our processors (e.g. Vercel, Calendly, Google) may process data in the United States. Such transfers are made under the European Commission‘s Standard Contractual Clauses (SCCs) and any additional safeguards required by law.

7. Retention periods

• Contact form submissions: 24 months from last contact.
• Demo bookings and related information: 24 months.
• Analytics data: up to 14 months (Google Analytics default).

8. Your rights

Under EU GDPR, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data ("right to be forgotten");
• restrict or object to processing;
• data portability;
• withdraw consent at any time.

To exercise any of these rights, contact our Data Protection Officer tommi@teksti.ai.

9. Right to lodge a complaint

You have the right to lodge a complaint with the Finnish Data Protection Ombudsman if you believe we are processing your data unlawfully. More information: tietosuoja.fi/en.

10. Application privacy

This policy covers the marketing website only. A separate privacy policy and Data Processing Agreement (DPA) cover the TekstiAI application (app.teksti.ai) and the handling of customer data. Contact our Data Protection Officer tommi@teksti.ai to request them.

11. Changes to this policy

We update this policy as needed. Material changes will be announced on this page. The "last updated" date at the top reflects the most recent revision.