Privacy notice.
ainoo. is being built by three students from Lahti. We haven’t founded our company yet, so for now one of us is personally responsible for the personal data this website collects. This page explains what we collect, why, and what you can do about it.
Who is responsible
Alex Nieminen, on behalf of the ainoo. team
Email: hello@ainoo.app
The rest of the team (Kalle Taskinen and Iida Ikonen) sees the data only to run the waitlist and answer messages.
When we found our company, it will take over this responsibility. We’ll update this page and email everyone on the waitlist before that happens. You can leave the list at any time.
What we collect and why
When you join the waitlist
What we save: your email address; the group you chose (consumer, public sector or investor); if you’re a consumer, your optional answer about whose letters you deal with; the language; where you came from, if the link said so (for example our pitch QR code) or we know it from talking with you; the date and time you joined, and when your signup last changed; which version of the consent text you agreed to, or, if you asked us by email or in person to add you, a short note of how, when and to whom you asked; a random code for the “remove me” link; and whether our welcome email was sent (and the error, if sending failed).
Why: to email you when ainoo. launches and now and then with news; to see how much interest there is in each group; and to be able to show that you agreed.
Legal basis: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time.
How long: until you remove yourself or ask us to. If we stop working on ainoo., we delete the whole list.
We don’t save your IP address or any details about your browser with your signup.
The welcome email
When you join, we send one welcome email with a link to remove yourself. Brevo sends it for us and keeps a delivery record of it, and your email address is added to our mailing list in Brevo. When you remove yourself, we delete your signup and your contact in Brevo.
The bot check on the waitlist form
Cloudflare Turnstile checks that a person, not a program, is filling in the form. It uses technical information from your browser, such as your IP address and browser type. We don’t store this information with your signup.
Legal basis: our legitimate interest in keeping the waitlist free of spam and fake signups (GDPR Art. 6(1)(f)).
Cloudflare also uses this information, as a separate controller, to improve its bot detection. See Cloudflare’s Turnstile privacy addendum.
When you email us
What: your name, email address and what you write.
Why: to answer you.
Legal basis: our legitimate interest in answering messages (GDPR Art. 6(1)(f)).
How long: as long as we need to deal with your message, and at most 2 years.
If you email us to join the waitlist, we keep that email for as long as you’re on the list, to show that you asked.
When you book a meeting on the Contact page
What: your name, email address, the meeting time and anything you write in the booking form. The booking calendar comes from Cal.com.
Why: to arrange and hold the meeting.
Legal basis: our legitimate interest in meeting people who contact us (GDPR Art. 6(1)(f)).
How long: we delete bookings 2 years after the meeting.
The calendar only loads when you press Show calendar. Until then, nothing is sent to Cal.com. When it loads, Cal.com receives technical information such as your IP address, even if you don’t book.
When you visit any page
Cloudflare delivers the website and protects it from attacks. To do this, it handles technical information such as your IP address, browser and the page you asked for. Logs of requests to our waitlist code, including technical information such as your IP address, are kept for 3 days.
Legal basis: our legitimate interest in running a working, secure website (GDPR Art. 6(1)(f)).
How we count visits
We count visits with Cloudflare Web Analytics, to see how many people come to the site, which pages they read and how they found us. A small script on our pages sends Cloudflare the page’s address, the page or site that linked to it, your browser, operating system and type of device, and how fast the page loaded. Cloudflare works out your country from your IP address. The script uses no cookies and stores nothing in your browser, so it can’t recognize you from one visit to the next or follow you to other websites. We only see totals, never individual visitors, and Cloudflare says Web Analytics doesn’t collect or use visitors’ personal data.
Legal basis: our legitimate interest in knowing how the website is used, so we can make it better (GDPR Art. 6(1)(f)).
How long: Cloudflare keeps the detailed counts for 7 days, then a sample of about a tenth of them for up to 6 months.
What we don’t do
- No cookies or tracking on our own pages, and no analytics that follow you.
- Our emails don’t record whether you personally open them or click their links.
- We don’t sell your data or use it for advertising.
- We don’t make automated decisions about you.
Who else handles your data
We use these services to run the site. They handle your data on our behalf, under data processing agreements, and only for the purposes above.
| Service | What it does for us | Where your data is |
|---|---|---|
| Cloudflare, Inc. | Hosts the website, stores the waitlist database, runs the bot check, counts visits | The waitlist database is stored in the EU. Cloudflare’s network works worldwide; Cloudflare is a US company certified under the EU–US Data Privacy Framework |
| Brevo SAS | Sends the welcome email and later updates, keeps our mailing lists | In the EU (France, Germany and Belgium) |
| Cal.com, Inc. | Meeting bookings on the Contact page, only after you press Show calendar | In the USA, under the EU’s Standard Contractual Clauses or the EU–US Data Privacy Framework |
| Namecheap, Inc. | Our email address hello@ainoo.app | Namecheap is a US company; transfers outside the EU are covered by the EU’s Standard Contractual Clauses |
Cookies
Our own pages don’t set cookies, and neither does our visit counter. Two parts that come from other services may store technical data in your browser:
- The bot check on the waitlist form (Cloudflare Turnstile): only what’s strictly needed for the check.
- The booking calendar on the Contact page (Cal.com), only after you press Show calendar: what’s needed to run the calendar. Cal.com says it uses no advertising cookies in its booking product.
Your rights
You can ask us to:
- show you the data we have about you
- correct it
- delete it. You can also remove yourself from the waitlist at any time with the link in your welcome email.
- stop using it for a while (restriction), or object to how we use it where we rely on our legitimate interest
- give it to you in a format a computer can read (portability)
You can withdraw your consent at any time. It doesn’t affect what we did before you withdrew it.
Email hello@ainoo.app. We’ll answer within one month at the latest.
If you think we’ve handled your data wrongly, you can complain to the Office of the Data Protection Ombudsman in Finland: tietosuoja.fi.
Do you have to give us your data?
No. Joining the waitlist, emailing us and booking a meeting are all your choice. We just can’t add you to the waitlist without an email address.
Changes to this notice
When we change this page, we update the date and version at the top. If a change matters for you, for example when our company takes over, we’ll email you before it happens.