Privacy Policy
How Brai Oy processes personal data on the brai.build website (also available at brai.fi), under the EU General Data Protection Regulation (GDPR).
Last updated: 2026-09-28
1. Controller
The controller of the personal data described in this policy is Brai Oy (Business ID 3188676-4), Finland (EU).
Contact for all privacy matters: info@brai.build.
2. Scope of this policy
This policy covers the brai.build website (also available at brai.fi). Our products have their own product-specific privacy policies; for example FIILIN has its own privacy policy covering the data processed in that service. This policy does not replace them.
3. What data we collect
We collect only what we need to run this website and to answer enquiries.
- Contact form data: name, email address, company name (optional), selected topic, message content, and the language you used.
- Technical server and security logs: IP address (stored as a hashed value together with contact messages for spam prevention), request time, requested address, browser user agent and similar technical metadata produced by our hosting and edge protection providers.
- Language preference stored in your browser's local storage (not sent to us as personal data).
4. Purposes and legal bases
- Answering your enquiry and related business communication — legal basis: your consent given when submitting the form, and our legitimate interest in responding to business contacts (GDPR Article 6(1)(a) and 6(1)(f)).
- Security, spam prevention and abuse protection of the website — legal basis: legitimate interest in keeping our service available and secure (Article 6(1)(f)).
- Meeting our legal obligations, for example accounting or responding to authorities — legal basis: legal obligation (Article 6(1)(c)).
5. Retention
Contact messages are kept for up to 24 months from the last communication, after which they are deleted unless a longer retention is required by law or by an ongoing customer relationship.
Technical server and security logs are kept for a short period, normally no longer than 12 months.
6. Recipients and processors
We do not sell personal data and we do not use it for advertising profiling. We use carefully selected service providers who process data on our behalf under data processing agreements:
- Hosting, database and application infrastructure providers, with data stored in the European Union.
- An email delivery provider used to deliver the notification of your message to us and our reply to you.
- Edge protection and content delivery, used to keep the site available and to block abuse.
7. International transfers
Our primary data storage is located in the European Union. If a service provider processes data outside the EU or EEA, we do so only where appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) together with additional technical and organisational measures.
8. Your rights
As a data subject you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data rectified.
- Have your data erased when there is no longer a lawful basis to keep it.
- Request restriction of processing.
- Object to processing based on legitimate interest.
- Receive your data in a portable, machine-readable format.
- Withdraw your consent at any time, without affecting processing already carried out.
To exercise any of these rights, email info@brai.build. We will respond within one month. If you believe we process your data unlawfully, you may lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
10. Security measures
Data is transmitted over encrypted connections (TLS) and stored in EU infrastructure with access controls. Database access is restricted with row-level access rules, administrative access is limited to named persons, secrets are stored in managed secret storage, and server-side validation and rate limiting protect our forms against abuse.
11. Changes to this policy
We may update this policy as our services or legal obligations change. The date below shows when it was last updated.
12. Contact
Brai Oy · Business ID 3188676-4 · Finland (EU) · info@brai.build