Privacy Policy

This Privacy Policy explains how Mainostoimisto Kiuas Oy (“Company,” “we,” “us,” “our”) collects, uses, and discloses personal data when you use the Kiuas Review Platform (the “Service”). ## 1. Scope This Policy applies to personal data processed through the Service website and application features. ## 2. Data We Collect We collect the following categories of data: - Account and profile data: email address, display name, account identifiers, organization association, role. - Service content and collaboration data: project names, draft metadata, comments, approvals, notifications, and related activity records. - Technical and usage data: IP-related security data, device/browser info, event logs, and performance/error logs. - Integration data: tokens and metadata required for connected services (for example cloud drive integrations), stored securely. - Communication data: emails and notifications sent for login, invites, and workflow events. - Preference data: settings such as theme/display preferences and notification preferences. ## 3. How We Use Data We use personal data to: - Provide and operate the Service. - Authenticate users and manage access. - Enable collaboration features. - Send transactional messages (for example magic links, invites, notifications). - Maintain security, prevent abuse, and investigate incidents. - Monitor, troubleshoot, and improve Service performance. - Comply with legal obligations. ## 4. Legal Bases (where applicable) Depending on your location, we process data under one or more legal bases: - Performance of a contract. - Legitimate interests (for example security and product improvement). - Consent (where required). - Compliance with legal obligations. ## 5. How We Share Data We do not sell personal data. We may share data with: - Service providers that help us operate the platform (hosting, database, storage, email, analytics, monitoring, push notifications, integration services). - Your organization administrators and authorized project participants, according to role-based permissions. - Authorities or legal recipients when required by law or to protect rights and security. - Successors in connection with a merger, acquisition, or asset transfer. ## 6. International Transfers Data may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers. ## 7. Data Retention We retain data only as long as needed for the purposes in this Policy, including legal, security, and operational needs. Retention periods may vary by data type and contractual or legal requirements. ## 8. Security We use reasonable technical and organizational measures to protect personal data. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed. ## 9. Your Rights Depending on applicable law, you may have rights to: - Access your personal data. - Correct inaccurate data. - Delete data. - Restrict or object to certain processing. - Receive a copy of your data (portability). - Withdraw consent where processing is based on consent. To exercise rights, contact us at suosio@suosio.com. ## 10. Cookies and Similar Technologies We may use cookies or local storage for authentication, session handling, security, and user preferences. You can control cookies through browser settings, but disabling them may affect functionality. ## 11. Children’s Privacy The Service is not directed to children under 16, and we do not knowingly collect their personal data. ## 12. Changes to This Policy We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the Service or other reasonable means. ## 13. Contact Mainostoimisto Kiuas Oy Suosiolankatu 1, 96320 Rovaniemi, Finland Email: suosio@suosio.com