Privacy Policy

Effective Date: 01.08.2025

Infinitiden / Elira ("we", "our", or "us") is committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR). This Privacy Policy outlines how we collect, process, and protect your personal data when you use our services.

1. Who We Are

We operate under a registered business entity in Finland with business ID (Y-tunnus): 3526013-6. Our primary office is located in Helsinki 00180.

2. What Data We Collect

We collect only the minimum data necessary to fulfill your order:

Name
Email address
Form responses (e.g., background, goals, qualifications)
Payment details (processed via Stripe — we do not store card data)

3. Why We Collect Your Data

We use your data:

To create and deliver your personalized letter
To communicate with you regarding your order
To comply with legal, tax, or accounting obligations

The legal basis for processing is contractual necessity and legitimate interest.

4. Third-Party Processors

To deliver your personalized letter, we may securely transmit your form inputs (e.g., name, goals, experience) to a third-party language model service provider for the sole purpose of generating your letter.
No data is stored by this provider.

We also use:

Stripe (for payment processing)
Automation Processing Software
Cloud-based storage to temporarily hold letters for delivery

All third-party tools we use are GDPR-compliant.

5. How Long We Retain Your Data

Form input data: Deleted within 60 days of order fulfillment
Transaction data (name/email): Retained for accounting and legal compliance, up to 6 years

No user accounts or behavioral tracking are implemented.

6. Your Rights Under GDPR

You have the right to:

Access the data we hold about you
Request correction or deletion
Object to or restrict processing
File a complaint with the Finnish Data Protection Ombudsman