Controller: Resolud Oy (business ID 3271825-2), Merikasarminkatu 6, 00160 Helsinki, Finland
Service: SavonAI / Savon-AI (https://savon-ai.com)
Privacy contact: [email protected]
Data Protection Officer: Resolud Oy has not appointed a statutory DPO. Privacy enquiries: [email protected].
Version: 1.5 · Last updated: 22 October 2026 · Language: This is a translation; the Finnish version (*Tietosuojaseloste*) prevails in case of conflict.
---
This Privacy Policy explains how Resolud Oy processes personal data when you visit our website, use the SavonAI service, or are contacted by us. It covers our processing as controller. Where we process personal data contained in a customer's content on the customer's behalf, we act as a processor — that processing is governed by our Data Processing Agreement (DPA) and the customer is the controller (Section 9).
We comply with the EU General Data Protection Regulation (GDPR), the Finnish Data Protection Act (1050/2018), and the Finnish Act on Electronic Communications Services.
The Service is aimed at businesses. We do not knowingly direct the Service to, or process data about, children.
| # | Data categories | Purpose | Legal basis (GDPR Art. 6) |
| A | Account & identity: name, work email, phone, company name, role, business ID (Y-tunnus), VAT number | Create and administer accounts, verify the company (PRH/YTJ, VIES), provide the Service, communicate about it | Performance of a contract 6(1)(b); for verification also legitimate interest / legal obligation |
| B | Authentication: hashed password, session identifiers, login timestamps | Secure sign-in and account security | Contract 6(1)(b); legitimate interest 6(1)(f) in security |
| C | Billing: Stripe customer/subscription IDs, invoices, plan, VAT status and VIES consultation number. *(Card numbers are handled by Stripe; we do not store them.)* | Take payment, manage subscriptions, meet VAT/accounting obligations | Contract 6(1)(b); legal obligation 6(1)(c) (accounting, VAT) |
| D | Usage & technical: IP address, device/browser data, log data, feature usage, AI-usage ledger (tokens per project), error diagnostics | Operate, secure, troubleshoot and improve the Service; prevent abuse; capacity/cost management | Legitimate interest 6(1)(f); contract 6(1)(b) |
| E | Support & communications: messages, enquiries, correspondence | Provide support and respond to you | Contract 6(1)(b); legitimate interest 6(1)(f) |
| F | Prospect / CRM data: publicly available business contact details (company, website, business ID, location, industry, and business phone/email), enrichment and ranking notes, outreach history, and — only if you have opted in per send — email open events | Identify potential business customers, evaluate fit, and carry out B2B direct marketing | Legitimate interest 6(1)(f) in B2B marketing (with a balancing test and an opt-out); email open-tracking only where enabled |
| G | Marketing preferences & suppression list: opt-outs, unsubscribes, bounces | Honour objections and suppress further contact | Legal obligation / legitimate interest 6(1)(f); consent where required |
| H | Cookies & similar on savon-ai.com | See the Cookie Policy | Strictly necessary cookies: legitimate interest; other cookies: consent 6(1)(a) |
| I | Meeting bookings: name, email, company, phone, current website, message, the booked time and your answers on the booking form, when you book a meeting with a "Book a meeting" button on savon-ai.com (via Calendly) or send a meeting request through our form | Arrange the meeting, communicate about it, and prepare the offer you asked for | Steps taken at your request before entering into a contract 6(1)(b); legitimate interest 6(1)(f) |
| J | Our own photos in «Some»: photos Resolud uploads to its demo restaurant, or that SavonAI staff upload to the Service from their own material (not supplied by a Customer), and the people who appear in them; the photo's details (who uploaded it and when, the answers about people, children and alcohol, the basis of the permission) and the result of automatic face detection (the number and position of faces in the photo — no recognition and no face templates) | Demonstrating the Service and preparing example posts; making sure that the people who appear in a photo have given their permission | Consent of the people who appear in the photo 6(1)(a); for the photo's details and face detection, legitimate interest 6(1)(f) (making sure the permission exists) |
| K | Demo restaurant bookings: name, email, phone, party size, the wished-for day and time and a free-text message, when you try the table booking, waitlist or loyalty sign-up of our demo restaurant «Bistro Esimerkki»; the booking's confirmation and other booking messages are sent to the email address you give | Demonstrating the Service: you see for yourself how a booking travels between a guest and a restaurant | Legitimate interest 6(1)(f) — a trial you start yourself |
| L | Facebook Page connection: when a company's Facebook Page admin connects the Page — the Page's public information (name, category, description, contact details, opening hours, address, the Page's own public posts, and its cover and profile photo); a Page access token, only if the company asked for refreshes without a new login; and, while such a token is kept, a keyed one-way code derived from the admin's app-scoped Facebook ID, so that a deletion request sent through Facebook finds it. *(We do not read comments, reviews, messages or other photos uploaded to the Page.)* | Building and updating the company's website from its own Page; honouring deletion requests | Contract 6(1)(b) with the company; for the admin's own data, legitimate interest 6(1)(f) — carrying out the connection the admin starts |
We collect most data directly from you or generate it through your use of the Service. Prospect data (F) is collected from public sources (your public website, public registers such as PRH/YTJ, and business directories).
A meeting booking (I) is made on Calendly's page (calendly.com), which savon-ai.com links to. We do not embed Calendly on our pages, so it sets no cookies on savon-ai.com. Calendly processes the booking data on our behalf (Section 5); Calendly's own page is additionally subject to Calendly's own cookie policy.
Demo restaurant bookings (K): in the demo restaurant Resolud itself is the controller. The data is stored in the demo restaurant's own booking book, used for nothing but the demonstration, and no names or contact details are given to an AI model. When a customer's restaurant takes bookings, the restaurant is the controller of its guests' data and Resolud processes it as a processor (section 9 and the DPA).
Our own photos (J): when a Customer uploads photos to the Service itself, the Customer is their controller and Resolud processes them as a processor (section 9 and the DPA). Row J covers only photos that Resolud brings into the Service itself. Face detection runs on our own server: it only tells whether faces appear in a photo, so that we can make sure the people who appear in it have given their permission. Faces are not recognised, and «Some» does not send photos to an AI model.
4.1 The Service uses generative AI (currently Anthropic's Claude models) to analyse websites, generate content, and power the customer-facing agent. AI processing that involves personal data in customer content is carried out as a processor under the DPA.
4.2 We do not use your personal data or customer content to train our own or third parties' foundation models. Our AI sub-processor is engaged on terms that do not permit training on your data without a lawful basis.
4.3 No solely-automated decisions with legal or similarly significant effects (GDPR Art. 22) are made about you. Prospect ranking and health scores are decision-support tools reviewed by a human before any outreach or action.
4.4 AI transparency (EU AI Act Art. 50, from 2 Aug 2026): AI-generated or AI-edited content is marked as such, and the customer-facing agent discloses that it is an AI. See the AI Transparency & Acceptable Use Policy.
4.5 Structure telemetry for product development: We collect structural information from customer environments to develop the Service: which data structures (e.g. a dataset's column count and a hash of its layout), business functions and document templates are in use, and which external system families (e.g. a CRM product family) the environment is connected to. The telemetry consists solely of the software's own closed vocabulary, counts and hashes — it never contains customer content, names, free text or personal data, and a system named in free form is always transmitted only as the class "other". No single customer's usage is visible in the results: an observation surfaces only once the same structure recurs at three or more independent customers. The detailed contents of a structure (e.g. column names) are disclosed only with the separate, revocable consent of that customer's owner. Telemetry can be switched off in the settings, entirely or per category, and switching it off does not affect how the Service works.
We share personal data only with service providers ("sub-processors" / "processors") who process it on our behalf under contract, and with authorities where legally required. Our main processors are:
| Provider | Role | Location | Transfer safeguard |
| Anthropic, PBC | Generative AI (LLM) inference | USA | SCCs / EU-US Data Privacy Framework where applicable; no training on your data |
| Stripe (Stripe Payments Europe, Ltd. / Stripe, Inc.) | Payments, subscriptions, EU VAT | Ireland (EU) / USA | SCCs; PCI-DSS |
| Cloudflare, Inc. | CDN, DNS, TLS, DDoS protection, custom hostnames, R2 object storage (EU jurisdiction), access/tunnel | USA with EU processing / R2 EU | SCCs; EU data-localisation options used |
| Hetzner Online GmbH | Virtual server hosting | Helsinki, Finland (EU) | Within EEA |
| Scaleway SAS | Transactional email | France (EU) | Within EEA |
| Google (Google Ireland Ltd) | Search Console connection via OAuth — only if a customer connects it | Ireland (EU) / USA | SCCs / DPF |
| Calendly LLC | Meeting scheduling (the "Book a meeting" buttons on savon-ai.com) | USA | SCCs / EU-US Data Privacy Framework where applicable |
We also consult public registers — the Finnish Business Information System (PRH/YTJ) and the EU VIES VAT system — to verify company details. These are data sources, not sub-processors.
Meta Platforms Ireland Ltd is likewise a data source, not a sub-processor: when a Page admin connects a Facebook Page (L), we receive the Page's information from Meta through Facebook Login, and Meta acts as an independent controller of its own processing. Transfers related to this are covered by the Meta Platform Terms (controller-to-controller Standard Contractual Clauses).
The current, maintained sub-processor list is published with the DPA. We give notice of intended sub-processor changes as described there.
Our infrastructure is hosted in the EU/EEA (Finland/EU). Some sub-processors (e.g. Anthropic and Calendly, and the US entities of Stripe, Cloudflare and Google) may process data outside the EEA. Where they do, we rely on appropriate safeguards under Chapter V GDPR — European Commission adequacy decisions (including the EU-US Data Privacy Framework where the recipient is certified) and/or Standard Contractual Clauses with supplementary measures. You can request a copy of the relevant safeguards from [email protected].
We keep personal data only as long as necessary for the purposes above:
Under the GDPR you have the right to: access your data; rectify inaccurate data; erase data ("right to be forgotten"); restrict processing; data portability; and object to processing based on legitimate interests, including a right to object at any time to direct marketing, after which we will stop. Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise your rights, contact [email protected]. We respond within one month (extendable by two months for complex requests) and may need to verify your identity. Exercising your rights is free unless requests are manifestly unfounded or excessive.
If the personal data is contained in a customer's content (processor role), please contact that customer (the controller); we will assist them as required by the DPA.
Complaints: You may lodge a complaint with the Finnish supervisory authority — the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), Lintulahdenkuja 4, 00530 Helsinki; tietosuoja.fi — or with the authority in your EU country of residence.
When we build, host and maintain a customer's site, run their Brain, or otherwise process personal data on their instructions, the customer is the controller and Resolud is the processor. That relationship — including instructions, security, sub-processing, assistance with data-subject requests, breach notification, and deletion/return — is governed by the Data Processing Agreement. Individuals whose data is in a customer's content should direct requests to that customer.
We protect personal data with technical and organisational measures appropriate to the risk, including: EU/EEA hosting; encryption in transit (TLS); per-tenant envelope encryption at rest for knowledge-base/Brain data; hashed passwords; role-based access control and structural tenant isolation; origin isolation for hosted sites (served as pre-built files; where the customer enables a form, submissions are received at the edge and stored in the EU until collected); logging and monitoring; regular backups with tested restore; and cryptographic erasure ("crypto-shred") as a deletion primitive. No system is perfectly secure; we work to detect and remediate issues and to notify affected parties and authorities of a personal-data breach as required by law.
Our website uses cookies and similar technologies. Strictly necessary cookies (e.g. the sign-in session) are used on the basis of our legitimate interest; other cookies require your consent via our consent tool. See the Cookie Policy for details and controls.
We may update this policy. We will post the updated version with a new "last updated" date and, for material changes, notify you by email or in-app. Continued use after the effective date constitutes acknowledgement.
---
Contact: Resolud Oy · Merikasarminkatu 6, 00160 Helsinki, Finland · [email protected] · https://savon-ai.com
Este documento está disponível em finlandês e em inglês. Em caso de divergência, prevalece a versão finlandesa.