Privacy Policy
Last updated 28.03.2025
DataFigured Oy ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This privacy notice outlines how we collect, process, and share your personal data and informs you about your privacy rights.
As a registered company, DataFigured Oy is fully committed to operating under GDPR compliance and takes full responsibility for protecting your privacy and data.
This Privacy Notice applies to our web application, which provides search functionality powered by language models (LLMs) through third-party service providers. While your personal data is securely stored within the EU, some of the query data you submit may be processed outside the EU, including in the United States, by our LLM service providers.
Contents of this Privacy Notice
- Who is the Data Controller?
- Information We Collect and How We Collect It
- The Purposes and the Lawful Basis for Processing
- Sharing of Information
- Data Transfers to Third Countries
- Data Retention
- How to Exercise Your Data Protection Rights
- Changes to this Privacy Notice
1. Who is the Data Controller?
DataFigured Oy is the official data controller for this application. If you have questions regarding this privacy notice, please contact us by email at info@datafigured.com.
2. Information We Collect and How We Collect It
We may collect, use, store, and transfer different types of personal and query data, which we categorize as follows:
- Personal Identification Information: Full name.
- Contact Data: Email address.
- Technical Data: IP address, login data, browser type and version, time zone, and other technical details about your device.
- Usage Data: How you interact with the app, including query submissions.
- Communication Data: Any messages or interactions with our support team.
Information is collected directly from you when you use the Service.
On our public website, optional analytics use PostHog to record page visits under a random browser identifier. Optional company identification uses Leadfeeder to identify organisations visiting the site. These integrations load only after you accept the relevant cookies. You can change your choice using Cookie settings in the website footer. A company match does not establish the identity of an individual visitor.
We store imported company names, locations, supplied business descriptions and assessments in AWS in Frankfurt. TypeSafe/Jev may process supplied company information to assess business relevance. These assessments are kept separately from the source information and are not proof of purchase intent. The PostHog delivery queue in AWS expires after seven days; imported company records are retained until deleted. Company names are not linked to individual browsing records by this workflow.
3. The Purposes and the Lawful Basis for Processing
We will only process your data when allowed by law. Our processing bases include:
- Legitimate Interest: We process data to understand and improve the service, enhance user experience, monitor performance, and ensure security.
- Consent: In cases where explicit consent is required, such as the use of cookies (other than strictly necessary technical cookies), we will seek your consent.
4. Sharing of Information
We may share your data with:
- Third-Party Service Providers: To provide our search functionality, we work with third-party providers who offer LLM capabilities and may process query data submitted through the app. These providers may process data in the United States and other locations outside the EU.
- Legal Obligations: We may disclose data when required by law or to protect rights, safety, or to comply with legal claims.
All third parties that process data on our behalf are bound by data processing agreements to comply with GDPR and protect your privacy.
5. Data Transfers to Third Countries
Your personal data is securely stored within the EU. However, the query data you submit may be transferred outside the EU, including to the United States, where some of our third-party LLM providers operate. We ensure that all necessary safeguards are in place, such as Standard Contractual Clauses (SCCs), to protect your query data when transferred outside the EU.
If you would like more information on the safety measures in place for data transfers outside the EU, please contact us by email at info@datafigured.com.
6. Data Retention
We retain personal data only as long as necessary to fulfill the purposes outlined in Section 3. If you stop using the Service, we will either delete or anonymize your personal data after:
- Personal Identification and Contact Data: 12 months
- Technical and Usage Data: 12 months
- Communication Data: 12 months
Data may be retained longer if legally required or if necessary for legal claims.
7. How to Exercise Your Data Protection Rights
You have certain rights under GDPR, including:
- Access: Request a copy of your data.
- Correction: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your data when appropriate.
- Objection: Object to processing based on legitimate interest.
- Restriction: Temporarily limit processing of your data.
- Data Portability: Transfer your data to another party.
- Withdraw Consent: Revoke consent for specific processing activities.
To exercise any of these rights, contact us at info@datafigured.com. We will respond in accordance with GDPR and applicable laws. You may also contact your local data protection authority with any concerns.
8. Changes to this Privacy Notice
We may update this Privacy Notice periodically to reflect changes in legal requirements or operational needs. We encourage you to review this notice regularly on our website to stay informed about our data privacy practices.