Who is responsible for your data

Sivlo is not yet a registered company. There is no contracting entity to name, so this page does not name one, and Sivlo cannot take payment or enter a contract until that changes. What is still outstanding: registered company name, company registration number, registered address, country of registration, governing law and competent courts.

Until then, checkout is simulated and takes no money, and everything below describes the terms that will apply when it is not. Reach the people behind Sivlo at hello@sivlo.fi.

Until a registered entity exists there is no data controller to name, which is one of the reasons this release does not accept production customer data or take payment. Send privacy questions to the address above and a person will answer them.

What we collect, and why

Your account. An email address and a password, or a Google sign-in. If you choose Google, Google authenticates you and tells us your email address; your Google password is never entered into Sivlo. This is needed to give you an account at all.

Your workspace. Which organizations you belong to and which projects you can reach, so the right people see the right projects and nobody else does.

Your projects. The business websites, market context, competitors, questions, analyses, sources and action statuses that make up the measurement you asked for. This is information about businesses and markets. It only becomes personal data if you put personal data into it, which is why the next paragraph exists.

What you send us. Support emails, and anything in them. Please do not send passwords, card numbers, health or other sensitive information, or your own customers’ private records — the analysis does not need any of it.

Billing. Once live billing begins, the records needed to invoice you and to satisfy accounting law. Card details are handled by the payment provider and never reach Sivlo’s systems.

Why we are allowed to hold it

Account, workspace and project data is processed to perform the contract you have with Sivlo — without it there is no service. Billing records are kept because the law requires them. Security logging and preventing abuse rest on a legitimate interest in keeping the service working and other customers safe. Where we ever rely on consent, you will be asked, and you can withdraw it as easily as you gave it.

Who else processes it

Sivlo uses service providers to run the product. They act on Sivlo’s instructions, under contract, and none of them is permitted to use your data for their own purposes. By category:

Hosting and content delivery: Running the application and serving it to your browser.
Database and authentication: Storing your workspace, projects and measurements, and signing you in.
AI answer engines: Answering the measured questions about your market. Questions are about a market, not about your account: no customer personal data is sent to them.
Email delivery: Sign-in links, account notices and anything you ask support for.
Error alerting: Telling our team when something breaks. An alert carries the error and internal identifiers, never your account details or what you measured.
Payment processing: Taking subscription payments once live billing begins. Card details are handled by the payment provider and never reach Sivlo's own systems.

The specific providers in each category, and where they process data, are available on request from hello@sivlo.fi. If any of them processes data outside the EEA, that transfer relies on the safeguards the law requires, and the request above will tell you which.

Sivlo does not sell your data, does not share it for advertising, and runs no advertising or analytics trackers on this site.

How long we keep it

Account and workspace records: For as long as the account exists, then deleted on request.
Projects, measurements and analysis history: For as long as the workspace keeps the project. Deleting a project deletes its measurements; the comparable history a plan retains is set by that plan.
Billing and invoice records: As long as accounting law requires once live billing begins, which is longer than an account may last and is not shortened by a deletion request.
Support correspondence: Kept while it is needed to answer you, then deleted.

Your rights

Ask what personal data is held about you, and get a copy of it.
Have anything inaccurate corrected.
Have it deleted, unless it must be kept for accounting or legal reasons.
Ask for processing to be restricted, or object to it.
Receive your data in a portable form.
Complain to a data protection supervisory authority in the country you live in.

To use any of them, email hello@sivlo.fi. You will get an answer within one month. There is no charge, and asking will never affect your service.

This release has no self-service account-deletion button; deletion is done by asking, and it is done properly.

Cookies

Sivlo sets the cookies needed to keep you signed in, and nothing else. There are no advertising cookies, no analytics scripts and no embedded third-party widgets, which is why there is no cookie banner to dismiss.

Read the Cookie Policy

Security

Access to a project runs through authenticated organization membership, checked on the server on every request. Passwords are handled by the authentication provider and are never stored by Sivlo. If something goes wrong in a way that puts your data at risk, you will be told.

Changes

If this notice changes in a way that affects you, you will be told before the change takes effect rather than after.

Ask us a privacy question