Privacy Policy

Effective 1 March 2025  ·  Big Qwerty Oy

1. Data Controller

Big Qwerty Oy
Business ID: 2844734-9
Apteekkarinkatu 3, FI-00790 Helsinki, Finland
Email: info@bigqwerty.fi
Phone: +358 40 758 9091

2. Data Protection Contact

For privacy-related enquiries, please contact us by email:
info@bigqwerty.fi

3. Register Name

Kotka Cost Estimate customer and user register.

4. Personal Data Collected

We collect the following data:

• Registration data: name, email address, password (hashed with bcrypt)
• Organisation data: company name, Business ID, contact details
• Usage data: login times, features used, calculation data content
• Payment data: billing information processed via Stripe (we do not store card details directly)
• Technical data: IP address, browser type, session identifiers

5. Purposes and Legal Basis for Processing

• Service delivery (performance of contract, Art. 6(1)(b) GDPR)
• Customer relationship management and communication (legitimate interest, Art. 6(1)(f))
• Billing and payment processing (performance of contract)
• Service development and analytics (legitimate interest)
• Legal obligations (accounting, Art. 6(1)(c))

6. Retention Periods

• User data is retained for the duration of the contract + 2 years after termination
• Billing documents: 7 years (Accounting Act)
• Log data: 12 months

7. Disclosure of Data

We do not sell personal data to third parties. We use the following sub-processors:

• Stripe, Inc. – Payment processing (USA, Standard Contractual Clauses)
• OpenAI, Inc. – AI features (USA, Standard Contractual Clauses)
• Replit, Inc. – Hosting platform (USA, Standard Contractual Clauses)
• Google LLC – Analytics (Google Analytics, USA, SCC)

8. Transfers Outside the EEA

Some of our services transfer data outside the EU/EEA (to the USA). Such transfers are based on EU Standard Contractual Clauses (SCCs) or the US–EU Data Privacy Framework.

9. Your Rights as a Data Subject

Under the GDPR you have the right to:

• Access – Obtain a copy of your personal data
• Rectification – Request correction of inaccurate data
• Erasure – Request deletion of your data ("right to be forgotten")
• Restriction of processing – Limit how we process your data in certain situations
• Data portability – Receive your data in a machine-readable format
• Objection – Object to processing based on legitimate interest

To exercise your rights, contact us at: info@bigqwerty.fi. We respond within 30 days. You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman.

10. Cookies

We use essential cookies required for the service to function (session cookie) and Google Analytics (opt-in). You can disable cookies in your browser settings.

11. Security

We protect your personal data using appropriate technical and organisational measures: passwords are hashed with bcrypt, data in transit is encrypted via TLS (HTTPS), and access to data is restricted on a need-to-know basis.

12. Changes to This Privacy Policy

We reserve the right to update this policy. We will notify registered users of material changes by email or within the service. Last updated: 1 March 2025.