Privacy,
in plain language.

Controller and contact details

The controller responsible for the processing described in this notice is:

What this notice covers

This notice applies when you visit boxinom.com, contact Boxinom, or use the Boxteri AI concierge. Processing carried out for a client project may be governed by a separate agreement or project-specific notice.

Personal data we process

Please do not enter confidential, sensitive, or special-category personal data into Boxteri.

Purposes and legal bases

AI concierge

Boxteri answers questions about Boxinom from an approved knowledge base. Most service-related questions are processed by Boxinom's server and may be sent, together with limited recent chat context and relevant knowledge-base excerpts, to OpenAI to generate an answer. Some simple queries are answered directly without calling an AI model.

Boxteri does not make legal or similarly significant automated decisions about you. Conversation history is held in the browser while the widget is open; the server separately records the interaction information described above for operational review.

Recipients and international transfers

Personal data may be processed by service providers that help us operate the website and our business, including:

• hosting, infrastructure, security, and email providers;
• Google Analytics after you consent to website analytics;
• OpenAI when an AI-generated concierge answer is required;
• Calendly when you choose to open its external scheduling service;
• professional advisers or public authorities where disclosure is necessary or legally required.

Some providers may process data outside the European Economic Area. Where required, transfers are based on an adequacy decision, Standard Contractual Clauses, or another lawful safeguard.

Retention

• Boxteri interaction logs: normally retained for 90 days and then deleted.
• Google Analytics data: retained according to the retention setting in Boxinom's Analytics property and Google's applicable retention controls.
• Enquiries and project communications: retained for as long as needed to respond, manage the relationship, and establish or defend legal claims.
• Contract, invoicing, and accounting records: retained for the periods required by applicable law.
• Technical and security logs: retained according to operational necessity and the relevant provider's retention schedule.

Data may be deleted earlier when it is no longer needed, or retained longer where a legal obligation requires it.

Cookies and external services

The site stores necessary preferences such as your language and analytics-consent choice. Google Analytics is not loaded and does not set analytics cookies unless you select “Accept analytics”. After consent, Google Analytics may use cookies including _ga and _ga_<container-id> to distinguish visits and measure site usage.

You can accept, reject, or later withdraw analytics consent through Analytics settings. Withdrawing consent stops future Analytics collection on this site and removes its accessible Analytics cookies where technically possible.

Calendly and EXALI are external websites. Their own terms and privacy notices apply after you choose to follow those links. The EXALI seal image displayed by Boxinom is hosted locally and does not contact EXALI merely because you view this page.

Your rights

Subject to the conditions in applicable data-protection law, you may have the right to:

• access and obtain a copy of your personal data;
• correct inaccurate or incomplete data;
• request erasure or restriction of processing;
• object to processing based on legitimate interests;
• receive data you provided in a portable format where applicable;
• withdraw consent without affecting earlier lawful processing;
• lodge a complaint with the Finnish Data Protection Ombudsman or another competent supervisory authority.

Send requests to info@boxinom.com. We may need to verify your identity before completing a request. You can find supervisory-authority guidance at tietosuoja.fi.

Security

We use technical and organisational safeguards appropriate to the nature and risk of the processing. No internet transmission or storage system is completely secure, so please avoid sending unnecessary confidential or sensitive information through the public website or Boxteri.

Changes to this notice

We update this notice when our services, providers, or legal obligations change. The date at the top identifies the latest revision. For questions about this notice, email info@boxinom.com.