Privacy Policy

1. Controller

AuxiliarAI is operated by Aterna Group Oy ("AuxiliarAI", "we", "us"), a company registered in Finland.

If you have any questions about this policy or your data, you can contact us at:

Email: support@auxiliarai.com
Country: Finland

2. Data we collect

We collect and process the following categories of personal data:

• Contact details – such as your name and email address when you fill in the assessment or purchase a report.
• Business and assessment information – your answers to the AuxiliarAI assessment and other information you provide about your business, so we can generate your preview and full report.
• Order and payment information – purchase amount, currency and payment identifiers from Stripe. We do not store your full card details.
• Usage data – technical information about how you use the website, such as pages visited, approximate location, device and browser details, and referring sources (for example, from analytics tools).
• Communication data – messages and feedback you send us by email or forms.

3. How we use your data

We process your personal data for the following purposes:

• To provide the AuxiliarAI service and generate your reports.
• To process payments and manage orders.
• To send transactional emails, such as receipts, report links and important service notifications.
• To improve and develop the product, including anonymised statistics and usage analytics.
• To communicate with you about updates, new features or related services, where permitted by law and/or with your consent.
• To comply with legal obligations and respond to lawful requests from authorities.

Under the GDPR, our main legal bases for processing are: performance of a contract (providing the service you purchase), our legitimate interests (developing and securing the service), and your consent where required (for example for certain types of marketing).

4. AI processing

AuxiliarAI uses third-party AI models to generate your previews and reports. This means that the assessment answers and other relevant context you provide may be sent to our AI infrastructure provider for processing.

We do not sell your prompts or outputs. We use them only to deliver your reports, improve model quality and reliability, and maintain the safety and security of the service, in line with our provider's terms.

5. Data processors and transfers

We use trusted third-party service providers to run AuxiliarAI, for example:

• Supabase – database, authentication and file storage.
• Stripe – payment processing.
• OpenAI – AI models used to generate content.
• Resend or similar – transactional email delivery.
• Plausible / PostHog or similar – privacy-focused analytics.

Some providers may be located outside the EU/EEA. Where data is transferred outside the EU/EEA, we rely on appropriate safeguards, such as the EU Standard Contractual Clauses or equivalent mechanisms.

6. Retention

We keep personal data only for as long as necessary for the purposes described above or as required by law. In general:

• Assessment data and preview reports may be removed after a limited period if you do not purchase a full report.
• Paid reports and related order records may be stored longer to provide ongoing access and to comply with accounting and legal obligations.

7. Your rights

If you are located in the EU/EEA, you have the following rights regarding your personal data:

• Right of access to the personal data we hold about you.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") in certain situations.
• Right to restriction of processing in certain circumstances.
• Right to data portability for data you have provided to us, where technically feasible.
• Right to object to some processing activities, including direct marketing.

To exercise any of these rights, contact us at support@auxiliarai.com. You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

8. Cookies and tracking

AuxiliarAI may use cookies or similar technologies to provide core functionality (such as keeping you signed in) and to measure usage. Where required by law, you will be offered a choice regarding optional cookies or analytics.

9. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse. However, no online service can guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates when the latest changes were made. If changes are significant, we may provide a more prominent notice in the Service.