Privacy Policy

Last updated: April 18, 2026

1. Data Controller and Scope

This Privacy Policy applies to the SALESCFG website, dashboard, embedded configurators, and related services (collectively the "Service").

The data controller is Service Rata Oy (business ID 3226441-4), Harjutie 5 E, 03100 Nummela, Finland. Contact: privacy@salescfg.com.

2. Information We Collect

We collect data you provide directly and technical data generated when you use the platform.

  • Name, email address, and contact information
  • Account and authentication details
  • Billing records and subscription metadata
  • Product configuration data you create in the app
  • Technical logs, IP addresses, browser type, and usage analytics
3. Legal Bases for Processing (GDPR Art. 6)

We process personal data on the following legal bases:

  • Performance of a contract (Art. 6(1)(b)) β€” to provide and maintain the Service, process subscriptions, handle billing, and deliver customer support
  • Legitimate interest (Art. 6(1)(f)) β€” to improve the Service, monitor performance, prevent abuse, troubleshoot incidents, and produce aggregated analytics
  • Legal obligation (Art. 6(1)(c)) β€” to comply with accounting, tax, and other statutory requirements
  • Consent (Art. 6(1)(a)) β€” where applicable, for analytics cookies and optional marketing communications; consent can be withdrawn at any time
4. Subprocessors

We share personal data only with subprocessors necessary to operate the Service. Key subprocessors include:

  • Microsoft Azure (cloud hosting and infrastructure) β€” EU region
  • Stripe (payment processing) β€” USA, EU SCCs in place
  • Resend (transactional email delivery) β€” USA, EU SCCs in place
  • Vercel (web hosting and edge functions) β€” global, EU SCCs in place
5. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we rely on European Commission Standard Contractual Clauses (SCCs) or adequacy decisions to ensure an adequate level of data protection.

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

  • Account data β€” for the duration of the subscription and 90 days after termination to allow data export
  • Billing and invoice records β€” for six (6) years after the end of the accounting period, as required by the Finnish Accounting Act (Kirjanpitolaki 1336/1997)
  • Technical logs β€” up to 12 months for security and troubleshooting purposes
  • Analytics data β€” retained in aggregated, anonymized form indefinitely
7. Data Security

We apply access controls, encryption in transit (TLS) and at rest, regular security reviews, and monitoring to protect personal data. Access is limited to authorized personnel on a need-to-know basis.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access β€” obtain a copy of the personal data we hold about you
  • Right to rectification β€” correct inaccurate or incomplete data
  • Right to erasure β€” request deletion of your data when processing is no longer necessary
  • Right to restriction of processing β€” limit how we use your data in certain circumstances
  • Right to data portability β€” receive your data in a structured, machine-readable format
  • Right to object β€” object to processing based on legitimate interest or for direct marketing
  • Right to withdraw consent β€” where processing is based on consent, withdraw it at any time without affecting prior processing
9. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), Lintulahdenkuja 4, 00530 Helsinki, Finland. Website: tietosuoja.fi.

10. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

11. Cookies

The Service uses cookies and similar technologies. For details on which cookies we use, their purposes, and how to manage them, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notification. The date of the last update is shown at the top of this page.

13. Contact

For privacy-related questions or to exercise your rights, contact us at privacy@salescfg.com or by post at Service Rata Oy, Harjutie 5 E, 03100 Nummela, Finland.

Privacy Policy | SalesCFG-Dev