Privacy information.

Controller and contact

TrustCore AI Systems Oy · Business ID 3618251-2 · Finland
kari.hyotyla@trustcore.fi
+358 41 711 1611

Postal seller contact details are in the sales terms.

Information we handle

We receive the contact details and message content you provide, and order and payment-confirmation information from PayPal. For delivery, support and withdrawals, this may include your name, email address, order reference, transaction details and correspondence. Hosting access logs may include IP addresses, request times, requested pages and technical request information.

An email address and sufficient order information are needed to match a confirmed payment and deliver the PDF. Do not send passwords, payment-card details or unnecessary personal information. This website does not collect payment-card details.

Purposes and legal bases

• Order fulfilment, email delivery and order support: performance of the contract. The PDF is delivered manually within 24 hours of confirmed payment, every day of the week.
• Payment and transaction processing: performance of the contract; legal obligation where accounting or tax retention applies.
• Accounting and statutory record retention: compliance with legal obligations.
• Withdrawal handling and confirmation: performance of the contract and compliance with applicable consumer-law obligations.
• General enquiries: steps you request before entering a contract, or our legitimate interest in responding to enquiries and managing the relevant correspondence, depending on the enquiry.
• Security logs: our legitimate interests in maintaining service availability and information security and investigating abuse.

Service providers and recipients

• Domainkeskus / Euronic Oy: Plesk web hosting and mailbox hosting in Finland.
• Google / Gmail: incoming messages to kari.hyotyla@trustcore.fi are forwarded from that hosting environment to a Gmail mailbox used by TrustCore. Google therefore also processes forwarded email content and related email information.
• PayPal: payment processing for Launch Edition orders. The Buy button opens PayPal's service; this website does not load the PayPal SDK.

These providers may process personal data according to their applicable service and privacy arrangements. TrustCore remains responsible for its own handling of customer information. Information may also be provided to competent authorities where a legal obligation requires it.

International processing and transfers

Hosting in Finland does not mean that all personal data stays in Finland or the European Economic Area (EEA). Google/Gmail and PayPal may process or transfer information internationally, including outside the EEA, under their applicable privacy and transfer arrangements.

See Google's Privacy Policy, Google's data-transfer information and PayPal's Privacy Statement, including its international-transfer and EEA provisions. These explain the providers' arrangements; this notice does not assign a particular destination or transfer mechanism to an individual order or message. Contact us for further information about the handling of your data.

Retention and deletion

The following periods govern TrustCore's retention. Providers' own processing may also be subject to their service terms, privacy notices and statutory obligations.

• Accounting and transaction records: at least 6 years from the end of the calendar year in which the relevant financial year ended, where Finnish accounting or tax law requires this.
• Financial statements, ledgers and equivalent statutory accounting material: at least 10 years from the end of the financial year.
• Order records and transaction-related correspondence: 6 years where they form part of accounting or transaction-verification material, calculated using the accounting-record rule above.
• Withdrawal notices and durable withdrawal receipts: 6 years as transaction-related evidence.
• Delivery email addresses and order-support data: only as long as needed for delivery, support and statutory accounting or transaction obligations. Not all email content is subject to 6-year retention.
• General enquiries without a transaction: up to 12 months after the last relevant contact, unless an ongoing matter or a legal obligation requires longer retention.
• Web and server access logs: normally 90 days. Longer retention is limited to what is needed for investigating a security incident or abuse, handling a legal claim or meeting a statutory obligation.

Personal data is deleted or anonymized when its stated purpose and any statutory retention obligation have ended. Accounting retention does not justify keeping unrelated personal data.

Marketing, analytics and public preview

Marketing data is not collected for this Launch workflow. An order or enquiry does not subscribe you to marketing. TrustCore V0.4 adds no analytics and loads no advertising trackers or third-party fonts. Hosting security logs are separate from analytics. The public preview requires no registration or email address.

External links take you to separately operated websites with their own privacy arrangements.

Your rights and requests

Contact kari.hyotyla@trustcore.fi to request access, correction, deletion, restriction or portability where applicable. You may object to processing based on legitimate interests. The available rights depend on the purpose and legal basis; a statutory retention duty may limit deletion.

You may lodge a complaint with the Office of the Data Protection Ombudsman.

The online withdrawal function is currently unavailable. See Withdraw from a contract for the available contact route.