Privacy policy.

Data controller and contact details.

Before production use, add AVUKSI's official company name, Finnish Business ID, postal address, data protection officer or contact person details, and a working contact method.

Data processed.

Data may include account and profile information, listings, messages, images, device and log data, payment status, and information related to safety and customer service.

Purposes and legal bases.

Data is processed to provide the service, enable interactions between users, maintain safety, fulfil obligations and prevent misuse. The legal basis for each processing activity will be described in the final policy.

Recipients and transfers.

The final policy will identify service providers, such as identity verification, storage, messaging and payment partners, and any transfers outside the European Economic Area.

Cookies and browser storage.

We remember acceptance or rejection in your browser’s localStorage for 180 days. Before a choice is made, we do not write to this storage or send visitor statistics. Statistics are off by default. You can withdraw permission or change your choice using Cookie settings in the footer. If browser storage is unavailable, the choice applies only on the open page.

Website visitor statistics.

Visitor statistics are collected only if you accept them in Cookie settings. The public website collects page-load counts, page paths, referral-source categories and device types. Statistics do not use cookies or identifiers stored in the browser. The daily visitor estimate is calculated on the server using an identifier derived from the IP address and browser information with a secret key; this identifier changes daily. Raw IP addresses and browser identification data are not stored in the visitor statistics database. URL query parameters, referring-page paths and administration pages are not collected. Events older than 90 days are deleted when the next event is collected. Do Not Track and Global Privacy Control settings are respected. Administrators see only aggregated visitor reports.

Launch notification waitlist.

When you request a launch notification, we store your email address, selected language and the timestamp and version of your consent in Avuksi’s Supabase database in the EU. Your details are used for a signup confirmation and one Avuksi launch notification, not a newsletter. Messages are sent through Resend. We also store the confirmation send status and the provider message ID to prevent repeated emails. We delete your address after sending the launch notification. You can withdraw your request and ask us to delete your details at any time by contacting support@avuksi.app.

To limit abuse, we store a daily rotating hash of the IP address calculated with a secret key, along with attempt timestamps. The original IP address is not stored in the waitlist database. Rate-limit records older than 24 hours are deleted on the next valid signup request. The waitlist is not publicly readable.

Retention periods.

Retention periods for account, listing, message, safety and payment data, and the reasons for those periods, must be defined and published before production use.

Your rights.

Under applicable law, users may request access to, correction or deletion of their data, restriction of processing, object to processing and request data portability. The policy will also explain the right to complain to a data protection authority.

Contact.

Questions: support@avuksi.app.