Privacy Policy

Last updated: 19 May 2026

1. Data Controller

Boostwith.ai Oy
Business ID: 3380791-9
Oravarinne 5 B 2
02270 ESPOO, Finland
Privacy inquiries: privacy@boostwith.ai

2. Products Covered

This privacy policy covers the following products and services provided by Boostwith.ai Oy:

• Certus AI — an AI assistant product built on the Boostwith.ai platform.

3. Personal Data We Process

The categories of personal data processed depend on the specific implementation and integration of Certus AI. The following data categories may be processed:

3.1 Always Processed

• User-provided chat content — messages and queries you send to Certus AI during use.
• User-supplied background data — documents or information you provide to Certus AI as reference material.

3.2 Implementation-Dependent

Depending on how Certus AI is integrated into your environment, the following data may also be processed:

• Usernames or display names
• User IP addresses
• User online status
• List of users present on a chat channel (when Certus AI is integrated into a chat channel)

3.3 Prohibited Data

Users must not supply large amounts of highly sensitive personal data (e.g., medical records, extensive personal identification datasets) to Certus AI. Such use is explicitly forbidden under our terms of service.

4. Purpose and Legal Basis

Personal data is processed for the following purposes:

• Providing the service — processing user queries and generating AI responses. Legal basis: performance of a contract or legitimate interest.
• Service improvement — analyzing usage patterns to improve product quality. Legal basis: legitimate interest.

5. Sub-Processors and Third-Party Services

Boostwith.ai Oy uses the following third-party service providers in the delivery of its products:

Category	Provider	Data Residency
Infrastructure	Amazon Web Services (AWS)	EU and global
Infrastructure	Hetzner	EU
SaaS (internal operations)	Microsoft 365	EU
SaaS (internal operations)	Google Workspace	EU
LLM Provider	OpenAI	Global
LLM Provider	Anthropic	Global
LLM Provider	AWS Bedrock	EU

Where data is processed outside the EU/EEA (OpenAI, Anthropic), transfers are conducted in accordance with applicable data protection regulations, including the use of Standard Contractual Clauses (SCCs) where required.

6. Data Retention

Chat content and user-supplied background data are retained for the duration necessary to provide the service. Users may request deletion of their data at any time by contacting privacy@boostwith.ai.

7. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing

To exercise any of these rights, contact privacy@boostwith.ai.

8. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:

Office of the Data Protection Ombudsman
Lintulahdenkuja 4, 00530 Helsinki
tietosuoja.fi

9. Changes to This Policy

This privacy policy may be updated from time to time. The "Last updated" date at the top of this page reflects the most recent revision.