Privacy policy

[Company name] (business ID [Business ID]), [Street address], [Postcode] Helsinki, Finland, is the data controller for account owners. Questions go to [hello@your-domain].

For people who take a quiz, the business that made the quiz is the controller and we are its processor. If you took a quiz and want your data changed or removed, write to the business named on it, or to us and we will pass it on.

We collect:

• your name and email address, to run your account and send you new-lead alerts;
• your website address and the text on it, when you ask us to write a quiz from it;
• your plan, payments and invoices, through our payment partner;
• server logs with your IP address, kept for 30 days, to keep the service secure.

We use this to provide the service you signed up for, to bill you, and to tell you about changes to the service. We do not sell it and we do not run advertising.

The business whose quiz you took gets:

• your answers, scores and the report written for you;
• your email address and, if you gave it, your first name;
• the page the quiz was on and the date.

We use the same data to show you your results, to email you a copy of your report, and to write the brief for the business. Your email address is never sent to the AI; only your first name and answers are.

These companies process data for us, under contracts that bind them to this policy:

• Anthropic writes quizzes, reports and briefs from the text we send. It does not keep the text to train its models.
• Supabase stores the database (accounts, quizzes, answers and leads).
• Vercel hosts the website and serves the quizzes.
• Resend sends the emails: reports to takers and alerts to owners.
• Paddle takes payments and issues invoices. We never see your card number.

Some of these companies are in the United States. Where data leaves the EU, it does so under the EU's standard contractual clauses or an adequacy decision.

Account data stays while your account exists and is deleted within 30 days of you closing it. Leads stay as long as the owner keeps them; owners can delete a lead at any time. Server logs are kept for 30 days. Invoices are kept for as long as Finnish accounting law requires.

We use one cookie, to keep account owners logged in. There are no advertising or tracking cookies, and quizzes embedded on other websites set no cookies at all.

Under the GDPR you can ask to see the data we hold about you, correct it, have it deleted, get a copy of it, or object to how we use it. Email us and we will answer within a month. You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

When this policy changes we update the date at the top and, for changes that matter, email account owners before they apply.