Suomeksi

Privacy notice

Updated 2 November 2026

Aitosoft Oy builds AI employees for Finnish small and medium-sized businesses. This notice explains briefly whose data we process, where it comes from and what rights you have. We do not track visitors to our website.

You can stop our messages at any time

If you have received a message from us and want no more, click the Peru viestit ("stop messages") link at the end of the message or reply to it. You have the right to object at any time to the processing of your data for direct marketing, without giving a reason. After that we will not contact you again.

Controller

Aitosoft Oy (business ID 2742784-8)
Hallikatu 14, 70100 Kuopio, Finland
Privacy contact: Tero Vaalamäki, tero@aitosoft.com

Whose data we process and where it comes from

Decision-makers at companies we contact. We look for companies that could benefit from our service, and for the people there whose work it concerns. We process their name, job title, employer, work email and work phone number, and the messages we exchange. The data comes from public sources: the company's own website, the Finnish Trade Register and other public company registers, published financial statements and the rest of the open internet. If an email address has not been published, we may infer it from the address format the company uses (for example firstname.lastname@company.fi). We do not buy contact lists.

Company database. We maintain a database, compiled from public sources, of Finnish companies and the people those companies name themselves on their websites or in the Trade Register. Our customers' AI employees use it to find companies that could benefit from what they offer.

People who write to us. We process your name, contact details and message. You do not need to give us anything else.

Our customers' contact persons. We process contact details and correspondence to manage the customer relationship.

Purposes and legal basis

We contact companies and their decision-makers in their work roles, hold the conversations, manage customer relationships and keep our data up to date. The legal basis is our legitimate interest in marketing and selling our service to businesses, and our customers' legitimate interest in reaching the right people at companies (Article 6(1)(f) of the EU General Data Protection Regulation); for customers, also the contract (Article 6(1)(b)). Email marketing to businesses is permitted in Finland when the message relates to the recipient's work. We do not process anything about people's private lives.

Artificial intelligence

Our messages are written, and replies answered, by our AI employee Maria. AI also reads public sources and assesses whether a company, and who in it, might be interested. We make no decisions about you that have legal or similarly significant effects on you.

Who processes the data

We do not sell data. Our customers' AI employees use our company database for their own business-to-business sales. In addition, service providers we use process data on our behalf:

• cloud services, database and email (EU)
• email connection, technical logging and retrieval of public company information (EU)
• customer relationship management and notifications to our staff (United States)
• AI services (primarily EU; also the United States and, for public information, other countries)

We primarily use AI services that run in the EU. They include the AI that writes our messages and the AI that works with our customer records and conversations. As a backup when an EU service is unavailable, and for searching the open internet, we use reputable US-based providers that do not use the data to train AI models. Data transferred to the United States is protected by the EU–U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

AI services based outside the EU and the United States, including Chinese ones, may also be used to process public information such as company websites. Of personal data, they see only what companies have published on their own websites, such as people's names and job titles. They never see our messages or our customer records. China has no European Commission decision on an adequate level of data protection.

How long we keep data

For as long as the contact is current or the customer relationship continues, and billing records for the period required by the Finnish Accounting Act. If you stop our messages or ask us to delete your data, we keep your email address and the fact that you objected, so that we do not contact you again.

Your rights

You can ask to see your data, to have it corrected or deleted, to restrict its processing, and to object to its processing. As a customer you can also ask for your data to be transferred to another system. Send your request to tero@aitosoft.com. If you believe we process your data unlawfully, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

Cookies

Our website uses no analytics or marketing cookies. Our provider Cloudflare sets one cookie necessary to protect the site (__cf_bm), which tells people from bots and expires after 30 minutes.

When a customer connects its email or calendar

When a customer connects its Microsoft or Google email or calendar to our service, we process its messages and events on the customer's behalf and on its instructions; for this data the customer is the controller. The AI employee reads and sends messages that concern the company's customers and sales, and books meetings. We do not store the content of other messages. We do not use mailbox or calendar data for advertising, do not sell it and do not use it to train AI models. We read it only with the customer's permission, for security, or where the law requires.

Aitosoft's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.