Privacy notice

Data controller

Intoku Oy
Email: emil@intoku.fi

Data we process

• Name, company, email address and an optional phone number.
• The content of an enquiry, the website address provided by the customer and public text retrieved from that website to prepare a concept.
• Internal customer service notes and the project’s status.
• Information relating to acceptance of a quote, payment and publication.
• Page views, traffic sources and uses of contact buttons to measure website activity. A daily visitor identifier is created from technical data using a one-way hash. Message content is not stored in analytics.
• Technical logs needed to keep the service secure.

Purposes and legal bases

We process data to take steps at the customer’s request, enter into and fulfil a contract, provide customer service, maintain information security and meet Intoku Oy’s legal obligations. Intoku Oy’s legitimate interests may also provide a basis for protecting and improving the service.

Service providers and data transfers

We use Google Workspace for communication, Supabase for the database and sign-in, Vercel to run the application, Resend for service messages, Stripe for payments and the OpenAI API to create text drafts for review. Only the information needed to prepare a draft is sent to AI, and it does not publish content automatically. Data may be processed outside the EU/EEA under the service providers’ contractual arrangements and safeguards.

Retention

Sales enquiries are retained for up to 24 months after the last active handling, unless a longer period is needed at the customer’s request. Project data is retained throughout the customer relationship and for a reasonable period afterwards to clarify responsibilities. Contract, payment and accounting records are retained for the periods required by law. A deletion request does not apply to data that must be retained by law.

Cookies and analytics

The public marketing website does not currently use advertising tracking. Sign-in and protected administration views use session data necessary for their operation. We will explain any new analytics or marketing service before introducing it.

Information security

Access to data is restricted according to work duties and user roles. Communications are encrypted, administrative actions are audited and service health is monitored. Payment card details are not stored in Intoku’s system.

Your rights

You may request access to, correction of or deletion of your data, and object to or restrict processing where permitted by law. Send requests to emil@intoku.fi. You may also lodge a complaint with the Finnish Data Protection Ombudsman.