Rascal AI – Privacy Policy

Updated: March 28, 2026

1. Data Controller

Rascal AI
Email: support@rascalai.fi
‍Phone: +358 40 759 7296

2. What information we collect and why

Contact information (name, email, phone)Legal basis: Performance of a contract (Art. 6(1)(b)) | Retention period: 3 years after the end of the contract

Company information (business ID, address)Legal basis: Performance of a contract (Art. 6(1)(b)) | Retention period: 3 years after the end of the contract

Service usage data (logins, actions)Legal basis: Legitimate interest (Art. 6(1)(f)) | Retention period: 12 months

Technical data (IP address, browser type)Legal basis: Legitimate interest (Art. 6(1)(f)) | Retention period: 12 months

Analytics and marketing data (cookies, site behavior)Legal basis: Consent (Art. 6(1)(a)) | Retention period: Until consent is withdrawn

3. Third parties and data sharing

We use the following third-party services to which personal data or behavioral data may be transferred:

Analytics

  • Google Analytics 4 (Google LLC) – website visitor tracking. Data is transferred to the USA using Standard Contractual Clauses (SCCs). Google Privacy Policy
  • Snitcher (Snitcher B.V.) – corporate IP identification for lead generation. Identifies visiting companies, not individuals. Legal basis: legitimate interest (B2B sales). Snitcher Privacy Policy

Marketing

  • Meta Pixel (Meta Platforms Inc.) – conversion tracking and remarketing for Facebook/Instagram advertising. Data is transferred to the USA using SCCs. Requires consent. Meta Privacy Policy

Infrastructure

  • Supabase Inc. – database service, data located in the EU (eu-central-1). DPA signed.
  • n8n GmbH – automation service, EU servers. DPA signed.

We do not sell personal data to third parties.

4. Data transfers outside the EU/EEA

Google Analytics and Meta Pixel transfer data to the United States. Transfers are based on the Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914/EU).

5. Cookies

We use the following categories of cookies:

Necessary cookies – service functionality. Does not require consent.

Analytics cookies – Google Analytics 4. Cookies: _ga (2 years), _ga_* (2 years), _gid (24 hours). Requires consent.

Marketing cookies – Meta Pixel. Cookie: _fbp (3 months). Requires consent.

Business identification – Snitcher. Cookie: _snitcher (365 days). Legal basis: legitimate interest.

You can manage or withdraw your consent at any time via the cookie banner on our website or through your browser settings.

6. Data subject rights

In accordance with the GDPR, you have the right to:

  • Right of access – to receive a copy of the data stored about you
  • Right to rectification – to correct inaccurate or incomplete information
  • Right to erasure – request the deletion of your data ("right to be forgotten")
  • Restriction of processing – restrict the processing of your data in certain situations
  • Data portability – receive your data in a machine-readable format
  • Right to object – object to processing based on legitimate interest
  • Withdrawal of consent – at any time, without affecting prior processing

Requests will be answered within 30 days. Contact us at: privacy@rascal.ai

You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).

7. Data Security

We protect personal data using measures such as:

  • Data traffic encrypted with TLS
  • Databases encrypted (AES-256)
  • Access management based on role-based permissions
  • Regular security audits
  • Data breach handling process (notification to the supervisory authority within 72 hours)

8. Updates to the Privacy Policy

We update this policy as needed. We will notify you of any material changes via email or within the service at least 14 days before they take effect. The updated version is always available at rascalai.fi/tietosuojaseloste.