Privacy Policy

Maunu Group Oy is the controller of the personal data described in this Privacy Policy. For privacy-related questions, contact privacy@spiiksi.fi.

We collect the following categories of data: • Account information: name, email address, hashed password, or Google sign-in identifier • Usage information: event, channel, and interpretation session logs and usage data • Audio data: during interpretation sessions, audio streams are processed in real time by OpenAI and Microsoft Azure. Audio is not stored permanently and is used only for real-time processing. • Technical information: IP address, browser type, device type, operating system, and consent settings • Payment information: billing and payment details are handled by Stripe and PayPal. We do not store payment card details

We use your data for the following purposes: • To provide and maintain the Service • To manage user accounts • To deliver interpretation features through AI models • To handle billing and payment processing • To provide customer support and service communications • To monitor, improve, and develop the Service • To measure site usage and marketing effectiveness where you have given consent • To comply with legal obligations

We process personal data on the following GDPR bases: • Performance of a contract: account management and service delivery • Legitimate interests: service security, fraud prevention, and product improvement • Legal obligation: accounting, tax, and reporting requirements • Consent: optional analytics, advertising-related measurement, and marketing communications where you have given consent

We use the following service providers to operate the Service: • OpenAI – real-time speech recognition and speech synthesis • Microsoft Azure – speech recognition and speech synthesis • Stripe – payment processing • PayPal – payment processing • Google OAuth – sign-in with a Google account (optional) • Google Analytics / Google tag – website analytics and advertising-related measurement where you have given consent We disclose data to these providers only to the extent necessary to provide the Service. We do not sell personal data to third parties.

We retain personal data for as long as your customer relationship or user account remains active, or as otherwise needed to provide the Service. After account deletion, we remove your data within 30 days unless legislation requires a longer retention period. For example, billing records may need to be retained for 7 years under Finnish accounting rules.

Under GDPR, you have the right to: • Access your personal data • Correct inaccurate or incomplete data • Request erasure of your data • Restrict processing • Receive your data in a portable format where applicable • Object to processing based on legitimate interests You can submit requests to privacy@spiiksi.fi. We aim to respond within 30 days. You also have the right to lodge a complaint with a supervisory authority, in Finland the Office of the Data Protection Ombudsman (tietosuoja.fi).

We protect personal data with appropriate technical and organizational safeguards. These include HTTPS encryption for data in transit, bcrypt password hashing, JWT-based authentication, role-based access control, and regular security reviews.

We use browser local storage and, where needed, technically necessary cookies to manage authentication and sessions. In addition, we use Google tag identifiers for analytics and advertising-related measurement only if you have given consent. You can accept or reject these optional purposes in the consent banner.

We will notify you of material changes by email or through the Service at least 14 days before they take effect. If you continue using the Service after the changes become effective, we will treat that as acceptance of the updated policy.

Privacy-related inquiries: privacy@spiiksi.fi