Privacy Policy

1. Data We Collect

We only collect data that you voluntarily provide:

• Your name and contact details (email, phone number)
• Company information when provided
• Your messages or inquiries via WhatsApp, email, or contact forms
• Optional: technical usage data via analytics (e.g., IP address, browser type, pages visited)

2. Why We Process Your Data

We process personal data to:

• Respond to your messages, inquiries, and service requests
• Provide and improve our AI-powered WhatsApp assistant service
• Analyze website usage to improve user experience
• Comply with legal obligations
• Establish and maintain business relationships

3. Legal Basis for Processing

We process your personal data based on:

• Legitimate interest: To respond to inquiries and provide our services
• Consent: When you voluntarily provide information through forms or communications
• Contract performance: To fulfill our obligations when providing services
• Legal obligation: To comply with applicable laws and regulations

3a. WhatsApp Communication Consent

When you initiate contact with us via WhatsApp:

• You provide explicit consent to receive follow-up messages from us on WhatsApp
• We will only send messages related to your inquiry and our construction management services
• You can opt out of WhatsApp communications at any time by replying "STOP" or blocking our number
• We respect all opt-out requests immediately and will not send further messages
• Your WhatsApp messages with us are subject to WhatsApp's terms of service and privacy policy

4. Data Storage and Retention

Your data is stored securely using GDPR-compliant services including:

• Vercel (website hosting, EU region)
• WhatsApp Business API (Meta, GDPR-compliant)
• Email services with appropriate data protection measures

We retain personal data only as long as necessary to fulfill the purposes outlined above, typically no longer than 3 years unless required by law.

5. Data Sharing

We do not sell or share your personal data with third parties, except:

• With service providers who help us operate our business (under strict data protection agreements)
• When required by law or to protect our legal rights
• With your explicit consent

6. Your Rights Under GDPR

Under the EU General Data Protection Regulation (GDPR) and Finnish Data Protection Act (Tietosuojalaki), you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent
• Lodge a complaint: With the Finnish Data Protection Authority (Tietosuojavaltuutetun toimisto)

7. Cookies and Analytics

Our website may use cookies and similar technologies to:

• Ensure proper website functionality
• Analyze website usage (anonymized data)
• Improve user experience

You can control cookie settings through your browser preferences.

8. Updates to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.