Privacy Policy

Last updated: 19 October 2026

1. Data Controller

Pauhu AI Ltd (Pauhu AI Oy)
Business ID (Y-tunnus): 3477255-1
Pohjoinen Hesperiankatu 15 A 10, 00260 Helsinki, Finland
WhatsApp: wa.me/358408668669

2. What Data We Collect

• Account data: email address, and organisation name if provided.
• Query data: the questions and searches you submit, used to return cited answers.
• Payment data: processed by Stripe (PCI DSS Level 1). We do not store card numbers.
• Technical data: IP address, browser type, preferred language, and timestamps, recorded in logs for security and reliability.

3. Legal Basis (GDPR Art. 6)

• Contract performance (Art. 6(1)(b)): account creation, service access, billing.
• Legitimate interest (Art. 6(1)(f)): security monitoring and fraud prevention.
• Legal obligation (Art. 6(1)(c)): tax and accounting records.
• Consent (Art. 6(1)(a)): analytics cookies (section 7).

4. Where Data Is Processed

Service data is processed and stored within the European Union by our hosting provider. Payment data is processed by Stripe, which may process it outside the EU under appropriate safeguards (Standard Contractual Clauses). Analytics data is processed by Google as described in section 7. We do not sell personal data.

5. Data Retention

Data type	Retention period
Account data	Duration of the account, plus 6 months
Query data	Kept only as long as needed to provide the service
Technical logs	Up to 90 days
Billing records	6 years (Finnish Accounting Act)

6. Your Rights (GDPR Art. 15-22)

• Right of access, rectification, and erasure.
• Right to restriction of, and objection to, processing.
• Right to data portability.
• Right to withdraw consent at any time.

To exercise any right, message us on WhatsApp. We respond within 30 days.

7. Cookies and Tracking

We use strictly necessary cookies for sign-in and preferences, and analytics cookies only with your consent. We do not use advertising cookies.

Analytics: We use Google Analytics 4, provided by Google Ireland Limited as our processor, to measure how this site is used. Our own tag sends the page viewed, scroll depth, time on page, and hour of the visit. For clicks, form submissions, and sections viewed, it also sends a label. The label comes only from the element's own data-action, id, name, or data-section attribute. If a section has none of these attributes, the tag uses its element type as the label. A label value that looks like an email address, a token or a long id is dropped, not sent. We send page addresses, link addresses, and referring page addresses without query strings or fragments. On our own sites, we record an address as /:other if it is absent from the site's list of published pages. For other sites, we send only the origin. For email and phone links, we send only the scheme. These limits apply to our tag's own events, not to data Google's tag collects independently. Google Analytics also records approximate location (city level), device type, and device details. Google's enhanced measurement is enabled for this site. It records scrolls and outbound clicks, meaning clicks on links to other sites, including the link address and link text. It records site searches using search words in page addresses, such as ?q=. It also records embedded video engagement and file downloads, including the download link address and link text. It records form interactions, including form starts and submissions, with the form name and destination. Google's user-provided data collection is also enabled. If Google's tag detects an email address or phone number on a page, it may collect that information in hashed form. Email addresses detected in collected data are redacted before they are sent. We set analytics cookies only after you select Accept in the banner. Before you accept, or if you decline, we store no analytics cookies on your device. Google may still receive measurement pings without cookies. Your network address reaches Google when your browser loads the analytics script; Google Analytics 4 does not log or store IP addresses. Google signals, ad personalisation, and Google data sharing are disabled. We use no advertising cookies and show no ads. We keep analytics data for 14 months. Google may process this data in the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses. Change your analytics choice .

For API and MCP calls we record token usage only: for each call, the tool, the token counts and the time. Our websites and MCP endpoint also keep a standard access log. It records the requested path, request time, and response status. Since 18 October 2026, the log has contained no IP address, port, request header, or query string. The free allowance is counted in memory per network address, cleared every day and never written to disk.

With analytics consent, our own tag also sends fixed funnel labels. These cover trying a request, viewing pricing, selecting a plan, starting checkout, viewing a receipt, and revisiting a section. Each label records whether it came from a click, a form submission or a view; a click is not proof of purchase. These events include only a published-page key and that trigger, not typed text, amounts, receipt identifiers, query strings or fragments. When you arrive through one of our own referral links, the events also carry that link's short code from our published list, kept in a session-only browser flag. Any other code is ignored. A session-only browser flag records whether you have previously visited a published page. The flag contains no visitor identifier. We read and write it only with analytics consent. Declining stops these funnel events. The separate behavior of the analytics provider’s tag is described above.

8. Supervisory Authority

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), P.O. Box 800, 00531 Helsinki, Finland. tietosuoja.fi

© 2026 Pauhu AI Ltd. All rights reserved.