Nettipoika Studio — privacy and cookies
Controller and contact Cloud Rift Oy, Business ID 3246185-6, Jäniksenpolku 11, 90850 Oulu, Finland, is the controller for product accounts, billing, support and platform security. Contact timo@nettipoika.fi or +358 44 973 4093. For personal data in a customer's hosted site, that customer normally decides the purposes and acts as controller; Cloud Rift acts as processor under section 8 of the service terms. Contact the site owner about that site's processing.
Data, sources, purposes and legal bases We receive your email, login verification and account identifier, order and billing details, country, optional business/tax details, permissions and consent records, and support correspondence from you and the identity/payment services. We process these to create your account, supply hosting, manage authorized agent connections and administer the subscription (GDPR Article 6(1)(b), contract). For a business representative's contact data, the basis is our legitimate interest in administering that business relationship. Tax, accounting and legally required records are processed for legal obligations (Article 6(1)(c)). Optional business verification uses Finnish public business registers and EU VAT validation when relevant to your order. IP addresses, authentication events, bounded technical logs, request identifiers and abuse reports support our legitimate interests in security, fraud prevention and diagnosing service failures (Article 6(1)(f)); we limit access and retention to what that purpose requires. When you or an agent you authorize submits a problem report, we process its text, the support reference, error code, tool, site release and profile, and the latest request identifiers, to diagnose and fix the service (Article 6(1)(f)). We remove recognized access tokens and email addresses before storing a report. A problem report sent from the Chat does not include the conversation, only the excerpt the Chat shows you and you approve before it is sent. When you use the Chat, we process your messages, attachments, the site data Chat retrieves, model call costs, and credit grants and spending, to supply Chat and account for credits (Article 6(1)(b)). We do not use account contents for advertising profiles or sell personal data. We do not make legally significant eligibility decisions solely by automated profiling. Automated operational controls enforce authorized scopes, payment state and resource limits; contact support to contest an error.
Recipients and locations Our authorized staff access data only when their work needs it. We use the following categories of service providers. Unless stated otherwise, each acts as our processor under a data processing agreement and receives only the data its task needs. Hosting: the service runs in Finland, on our own servers and on servers from a cloud provider in the EU. Sign-in, backups and monitoring also run in Finland, on servers we operate. Email service: sends verification codes and support email. Its processing includes locations outside the EEA, including Australia and the United States, and those transfers rely on the EU Standard Contractual Clauses. Issue tracking service: helps us handle problem reports. It receives only the support reference and technical fault data: error code, tool, site release and profile, and the report's dates and counts. Report text, excerpts, email addresses, account or site identifiers and request identifiers are not sent to it. Its processing takes place in the United States, and the transfers rely on the EU Standard Contractual Clauses. AI model routing service and language model provider: when the Chat runs on Nettipoika's own key, your Chat messages, attachments and the site data the Chat retrieves go to an AI model routing service. It passes them to a language model provider to produce a reply. This processing takes place outside the EEA, including the United States, and the transfers rely on the EU Standard Contractual Clauses. Content delivery and name service: delivers our public marketing pages and answers DNS queries for our domains. It processes the visitor's IP address and the requested page, and this may take place outside the EEA under the EU Standard Contractual Clauses. Traffic to the product, sign-in and customers' sites does not pass through it; it goes directly to our hosting servers. Your own AI service key: if you use the Chat with your own AI service API key, your conversations are processed through the AI service you have chosen, on your own account and under its terms. That relationship is between you and that service, and Nettipoika is not responsible for it. Payments: Mollie processes payments, fraud checks and legally required payment records as an independent controller under its own privacy notice (mollie.com/privacy). You use Mollie's payment page directly. We share only the billing and transaction data the payment needs. Your agent: an agent you authorize receives the site information and capabilities within the scope you grant. You choose and contract with that agent provider yourself; its processing and any transfers follow its own terms. Ask us if you want more information about our providers or a copy of the transfer safeguards.
Retention and security Account and operational data are kept while needed to supply the account, maintain consent and connection history, investigate security events and resolve documented claims. We review continued necessity when the account closes; data not required for those purposes is deleted or anonymized. Site suspension starts a 30-day primary-data retention period. Problem reports, their occurrences and excerpts are deleted 12 months after the report is closed. When an account is deleted, its open reports are closed and the same 12 months apply. Chat conversations, their attachments and a saved own API key are kept while the account is active. They are deleted within 30 days after the account is closed, and the Chat's backup copies expire within another 30 days. Credit grants, spending and purchases are accounting records and are kept for the accounting period described below. Service-managed deletion snapshots expire within 35 additional days. Separate restricted disaster-recovery archives rotate through 7 daily, 4 weekly and 6 monthly restore points, so deleted site and account data can remain there for approximately six months. These archives are used only for recovery, and deletions are applied again before restored data returns to ordinary use. A specific dispute or legal preservation duty can require restricted retention of relevant evidence, not unrestricted reuse. Finnish accounting material is kept for the applicable statutory period: supporting transaction records generally six years from the end of the year in which the financial year ended, and financial statements and accounting books ten years from financial-year end. A deletion request cannot erase records we must retain by law. We use tenant isolation, access controls, encrypted transport and restricted backup access. No system is risk-free; do not put credentials or sensitive data into source files or support messages.
Your rights Depending on the legal basis and circumstances, you can request access, correction, deletion, restriction, portability and object to legitimate-interest processing. If a separate optional activity relies on consent, you can withdraw it without affecting earlier lawful processing. Contact timo@nettipoika.fi. We verify your identity proportionately and respond within one month. If a request is complex or there are many requests, we may extend this by up to two months and tell you why within the first month. You may lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) or your competent EU supervisory authority. Essential account, order and payment data are needed for the service; without them we cannot complete signup or supply the paid subscription. Optional company details are not required for an individual customer.
Cookies and aggregate measurement The product uses necessary session, sign-in security, CSRF and language-preference cookies. Authentication involves the separate auth.nettipoika.fi address and the chosen agent's OAuth return path. These cookies support the service you request; they are not advertising trackers. Studio's public information pages, such as the front page and the plans, use cookie-free, aggregate page-view statistics that run on our own server. Sign-in, checkout and dashboard pages do not load them. Your own published site's cookies and analytics are your responsibility. Before we use personal data for a new purpose, we tell you about it.