Privacy Policy

Valuepoint Labs Oy ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard information when you use the Valuepoint Labs platform ("the Service").

1. Data We Collect

We collect the following categories of personal data:

• Account data: name, email address, and hashed password when you register
• Usage data: pages visited, features used, and session information
• Content data: value propositions, customer profiles, and financial models you create and save in the Service
• Technical data: IP address, browser type, device information, and cookies

2. How We Use Your Data

We use your data to:

• Provide and maintain the Service
• Authenticate your identity and manage your account
• Send transactional emails (e.g. password resets)
• Improve the Service and fix bugs
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your content data to train AI models.

3. Legal Basis (GDPR)

Our legal basis for processing personal data is: (a) contract performance — to provide the Service you have signed up for; (b) legitimate interests — to operate and improve the Service; and (c) legal obligation — where required by applicable law.

4. Data Retention

We retain your account data and value prop content for as long as your account is active. You may delete your account at any time, after which your personal data will be deleted within 30 days, except where retention is required by law.

5. Data Security

We use industry-standard security measures including encrypted storage of passwords, HTTPS for all data in transit, and session-based authentication. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Third-Party Services

We use Anthropic's Claude API to process your value proposition inputs and generate financial analyses. Inputs submitted for analysis are processed according to Anthropic's privacy policy. We do not share your account information with Anthropic.

7. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Lodge a complaint with a supervisory authority (in Finland: Tietosuojavaltuutettu)

8. Cookies

We use strictly necessary session cookies to maintain your authenticated session. We do not use tracking or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice in the Service.

10. Contact

For privacy-related queries or to exercise your rights, contact: [email protected]