Privacy policy

1. Data controller

Optimaatti
Business ID: 2493479-9
Address: Ryösöntie 14, 53300 Lappeenranta
Email: antti.laakso@aidemo.fi

2. Register name

Optimaatti customer register

3. Purpose of processing personal data

We process personal data to operate the service and deliver its features. Main purposes include:

Account creation, sign-in, and access control
Connecting and controlling devices (e.g., device identifiers and settings)
Keeping the service reliable and secure (logs, troubleshooting, security monitoring)
Customer support and service-related communications
Payments and billing (only if/when paid plans are enabled)

4. Data contents

We typically process the following categories of data:

Account data (e.g., email address and optionally name)
Authentication data (password stored securely; not in plain text)
Device data and configuration (e.g., device identifiers, rules, settings)
Usage and diagnostic data (e.g., logs and error reports)
Payment-related data via payment providers (we do not store card details ourselves)

5. Regular sources of data

Data is primarily collected from you (registration, settings, device connection) and from technical data generated during use of the service (logs/diagnostics).

6. Retention period

We retain data only as long as needed to provide the service, fulfill contractual obligations, and keep the service secure. If you request account deletion, we delete data within a reasonable time unless longer retention is required by law (e.g., accounting).

7. Data disclosure

We do not disclose personal data to third parties for their own independent purposes. Data may be disclosed only when required by law or when you explicitly request it.

7.1. Service providers and processors

We may use trusted service providers (processors) to run the service. Providers may process data only to deliver the service and under our instructions and agreements.

Cloud/hosting providers (running the service and databases)
Communication providers (e.g., notifications and customer support)
Payment providers (only if/when paid plans are enabled)

7.2. Sale of personal data

We do not sell personal data or other user-linked data. We also do not share data for advertising purposes.

8. Transfers outside the EU/EEA

As a rule, we process data in the EU/EEA. If a provider processes data outside the EU/EEA, we ensure appropriate safeguards (e.g., EU Standard Contractual Clauses).

9. Data security principles

We protect data with technical and organizational measures. Examples:

Data is encrypted in transit (TLS/SSL)
Passwords are stored securely (not in plain text)
Access is restricted and monitored
Logging and monitoring are used to detect abuse

10. Data subject rights

Depending on applicable law, you have rights such as:

Access your data
Request rectification of inaccurate data
Request deletion of your data
Restrict processing of your data
Object to processing of your data
Transfer your data to another system

10.1. Account and data deletion

If you want to delete your account and related data, do the following:

Email the address listed in the ?Contact? section below.
Include your account email address and clearly state ?Account deletion?.
We confirm the request and delete data within a reasonable time. Some data may be retained if required by law.

10.2. App permissions (Android)

The app requests Android runtime permissions only when needed for specific functionality. The mobile app may use location for geofencing to automate devices/lights based on whether you are at home or away. This feature is turned off by default and location data is used only to enable automations (not for advertising or any other purposes). You can review and change permissions in your device settings at any time.

11. Contact

For privacy-related questions, you can contact:
Email: antti.laakso@aidemo.fi