Privacy Policy

1. Controller and contact

Controller: Understandify Ab Oy

Address: Sahakatu 2, FI-65170 Vaasa, Finland

Privacy contact: info@understandify.com

2. Data covered by this policy

The site’s White Label pilot form may collect your name, work email address, organization, selected segment, requested languages and an optional message.

Technical request data used for security and rate limiting may also be processed.

3. Why we process data

We process this data to receive and respond to pilot inquiries, protect the form against abuse, assess whether an inquiry is a genuine business or support inquiry, and operate, secure and improve the website.

The final legal basis, retention schedule and complete cookie and analytics position require legal review before production use.

4. How inquiries are handled

A pilot inquiry is stored in the site's private hosted database. Its fields are screened server-side using the Jev decision service to identify likely business or support inquiries and abuse.

Eligible inquiries may be notified to the fixed Understandify webform inbox through Mailcow. The browser cannot choose the email recipient.

This screening is not a final automated decision about an individual. Inquiries that cannot be classified safely are held for review.

5. Service providers

Current technical providers include Lovable Cloud/Supabase for site hosting and private inquiry storage, OpenRouter/TypeSafe Jev for inquiry screening, and Mailcow for notification delivery.

Each provider's role, location, transfer safeguards and agreements will be confirmed during legal finalization.

6. Retention

We intend to keep pilot inquiry data only for as long as needed to respond, follow up, meet applicable obligations and resolve security or abuse issues. The specific retention schedule is pending legal finalization.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection or portability by contacting info@understandify.com. You may also contact your competent data-protection authority.

8. Cookies and third-party services

The analytics, embedded content and cookies that are active will be listed here, with any required consent or notice.

9. Changes

This policy will be updated when processing changes. The final production version will state its effective date.