Privacy Notice

Last updated 28.03.2025

DataFigured Oy ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This privacy notice outlines how we collect, process, and share your personal data and informs you about your privacy rights.

As a registered company, DataFigured Oy is fully committed to operating under GDPR compliance and takes full responsibility for protecting your privacy and data.

This Privacy Notice applies to our web application, which provides search functionality powered by language models (LLMs) through third-party service providers. While your personal data is securely stored within the EU, some of the query data you submit may be processed outside the EU, including in the United States, by our LLM service providers.

Contents of this Privacy Notice

  1. Who is the Data Controller?
  2. Information We Collect and How We Collect It
  3. The Purposes and the Lawful Basis for Processing
  4. Sharing of Information
  5. Data Transfers to Third Countries
  6. Data Retention
  7. How to Exercise Your Data Protection Rights
  8. Changes to this Privacy Notice

  1. Who is the Data Controller?

DataFigured Oy is the official data controller for this application. If you have questions regarding this privacy notice, please contact us by email at info@datafigured.com.


  1. Information We Collect and How We Collect It We may collect, use, store, and transfer different types of personal and query data, which we categorize as follows:
  • Personal Identification Information: Full name.
  • Contact Data: Email address.
  • Technical Data: IP address, login data, browser type and version, time zone, and other technical details about your device.
  • Usage Data: How you interact with the app, including query submissions.
  • Communication Data: Any messages or interactions with our support team.

Information is collected directly from you when you use the Service.


  1. The Purposes and the Lawful Basis for Processing

We will only process your data when allowed by law. Our processing bases include:

  • Legitimate Interest: We process data to understand and improve the service, enhance user experience, monitor performance, and ensure security.
  • Consent: In cases where explicit consent is required, such as the use of cookies (other than strictly necessary technical cookies), we will seek your consent.

  1. Sharing of Information

We may share your data with:

  • Third-Party Service Providers: To provide our search functionality, we work with third-party providers who offer LLM capabilities and may process query data submitted through the app. These providers may process data in the United States and other locations outside the EU.
  • Legal Obligations: We may disclose data when required by law or to protect rights, safety, or to comply with legal claims.

All third parties that process data on our behalf are bound by data processing agreements to comply with GDPR and protect your privacy.


  1. Data Transfers to Third Countries

Your personal data is securely stored within the EU. However, the query data you submit may be transferred outside the EU, including to the United States, where some of our third-party LLM providers operate. We ensure that all necessary safeguards are in place, such as Standard Contractual Clauses (SCCs), to protect your query data when transferred outside the EU.

If you would like more information on the safety measures in place for data transfers outside the EU, please contact us by email at info@datafigured.com.


  1. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in Section 3. If you stop using the Service, we will either delete or anonymize your personal data after:

  • Personal Identification and Contact Data: 12 months
  • Technical and Usage Data: 12 months
  • Communication Data: 12 months

Data may be retained longer if legally required or if necessary for legal claims.


  1. How to Exercise Your Data Protection Rights

You have certain rights under GDPR, including:

  • Access: Request a copy of your data.
  • Correction: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data when appropriate.
  • Objection: Object to processing based on legitimate interest.
  • Restriction: Temporarily limit processing of your data.
  • Data Portability: Transfer your data to another party.
  • Withdraw Consent: Revoke consent for specific processing activities.

To exercise any of these rights, contact us at info@datafigured.com. We will respond in accordance with GDPR and applicable laws. You may also contact your local data protection authority with any concerns.


  1. Changes to this Privacy Notice

We may update this Privacy Notice periodically to reflect changes in legal requirements or operational needs. We encourage you to review this notice regularly on our website to stay informed about our data privacy practices.