Privacy Policy

1. Introduction

SISUiQ OY ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

We collect information you provide directly to us, including:

• Account information (name, email, organization)
• Usage data and analytics
• Documents and content you upload
• Communication preferences

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices and support messages
• Respond to your comments and questions
• Analyze usage patterns to improve user experience

4. Sub-Processors

In accordance with GDPR Article 28, we maintain a list of sub-processors who process personal data on our behalf. Your data is only shared with these providers to deliver the service and is governed by Data Processing Agreements (DPAs):

• OpenAI — LLM inference and embeddings (governed by OpenAI's API DPA; your data is not used to train public models)
• Vector Database Provider — Semantic search infrastructure
• Cloud Infrastructure Provider — Application hosting and compute
• Managed Database Provider — Relational data storage

We will notify customers of any changes to our sub-processor list at least 30 days in advance. For a machine-readable version, contact [email protected].

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption at rest and in transit, regular security assessments, and strict access controls.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. You may request deletion of your data at any time.

7. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability

8. Cookies & Tracking

We use essential cookies to maintain your session and preferences. These are strictly necessary for the platform to function and cannot be disabled.

• Session cookies — authenticate your login and maintain your session
• Preference cookies — remember your settings (theme, language)

We do not use third-party advertising or tracking cookies. We do not sell or share cookie data with third parties. If we introduce optional analytics cookies in the future, we will update this policy and request your explicit consent.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at [email protected]