Privacy Policy
This policy explains how we process personal data when you use Fleksi.io, including via the website, apps, and support channels.
Data controller
Controller: Fleksi.io, Peltovuorentie 23 a !, Finland. Contact: Use the contact form.
Data we process
Account and contact details for users and admins (name, email, role, phone, company code). Company and workspace data you submit (customers, invoices, tasks, files), which may include customer or employee contact details. Usage and device data such as logins, IP address, browser, device identifiers, and diagnostic logs. Support communications, bug reports, and feedback, including attachments you provide. Billing and subscription data (billing contact, invoices, payment references) when applicable.
Purposes and legal bases
Provide and maintain the service, including authentication, access control, and storage (contract). Security, fraud prevention, auditing, and service improvement (legitimate interest). Customer communications, onboarding, and support (legitimate interest). Compliance with legal obligations such as accounting and tax (legal obligation). Optional analytics or marketing where required (consent).
Sharing and processors
We use processors for hosting, email delivery, analytics, and customer support (for example, Google and Apple iCloud). They are bound by data processing agreements. We do not sell personal data.
International transfers
We primarily use EU/EEA servers. Some services may process data outside the EEA; when they do, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs).
Retention
We keep personal data while accounts are active and as needed for support and security. Our planned retention is 12 months, except for accounting records which are retained as required by law. Backups are retained for a limited period, and customers remain responsible for their own backups. We delete or anonymize data when it is no longer needed.
Your rights
Access, rectification, and erasure. Restriction and objection to processing. Data portability. Withdraw consent at any time when processing is based on consent.
To exercise your rights, use the contact form. You can also lodge a complaint with your local data protection authority.
Cookies
We use necessary cookies for login and security, preference cookies for language, and analytics cookies where permitted. See our Cookie Policy for details. Cookie Policy
Contact
For privacy requests, use the contact form on the website.