Privacy Policy

The short version

If you join the StemMixr beta waitlist:

• We collect your email address so we can contact you about your waitlist signup and beta access.
• If you separately opt in to StemMixr marketing emails, we may also send you occasional product news, launch updates and offers related to StemMixr.
• You can unsubscribe or withdraw your consent at any time.
• We do not sell or rent your email address, or give our mailing list to anyone for their own marketing.
• We use service providers only as needed to operate the waitlist and send our emails.
• Your data is protected in transit using HTTPS/TLS and encrypted at rest using AWS encryption.
• We use Cloudflare Turnstile to keep bots off the signup form. We do not store your IP address or browser details with your signup.

That's the practical version. The details are below.

Who is responsible for your data?

VAU Company Oy, Business ID 2707316-2, Ahlmanintie 44, 33800 Tampere, Finland. We operate StemMixr and are the data controller for the signups collected on it.

Privacy questions or requests can be sent to:

info@stemmixr.com

What information do we collect?

For the beta waitlist and related email communications, we collect:

• your email address;
• whether you consented to receive optional StemMixr marketing emails;
• records needed to demonstrate and manage your consent;
• the country the signup came from, as a two-letter country code such as FI.

We do not store your IP address or your browser and device details alongside your signup, and our application logs do not record them either. We do not use the waitlist to build advertising profiles about you.

Why do we use it?

We use your email address for two separate purposes.

Beta waitlist and access. If you join the waitlist, we use your email address to manage your signup and contact you about StemMixr beta access.

The legal basis for this processing is your consent.

Optional StemMixr marketing. If you separately opt in, we may send occasional emails about StemMixr product news, development, launch updates and offers.

The legal basis for this processing is your separate consent.

You can withdraw either consent at any time. Withdrawing consent does not affect processing that took place lawfully before you withdrew it.

Providing your email address is voluntary, but we cannot place you on the beta waitlist without it. Consent to additional marketing emails is optional and is not required to join the waitlist.

Who receives your information?

We do not sell or rent your email address, and we do not provide our mailing list to third parties for their own marketing or other independent purposes.

We use service providers where necessary to operate the service: Amazon Web Services (AWS) for infrastructure, storage, and email delivery, Cloudflare for bot protection on the signup form. These providers process personal data only to provide services to us and under our instructions.

If we change providers in a way that materially changes how your personal data is handled, we will update this policy.

Bot protection and abuse prevention

The signup form is protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than from an automated script. We also rate-limit signup requests at the network edge so that one source cannot flood the form.

As explained above, we do not store your IP address with your signup. Our service providers, including Amazon Web Services and Cloudflare, may process network information such as IP addresses transiently in order to deliver the service, protect it against abuse, and apply those rate limits. That processing is necessary for us to offer a working signup form, and our legitimate interest in keeping it available and free of automated abuse is the legal basis for it.

Where signups come from

When you sign up, our content delivery network resolves your approximate country from network information at the edge and passes on a two-letter country code, such as FI. We store that code with your signup.

The legal basis for this processing is our legitimate interest in understanding the demand for our own product. You can object to it at any time, as described under Your data-protection rights below.

International transfers

Some service providers may process personal data outside the European Economic Area.

Where personal data is transferred outside the EEA, we use a lawful transfer mechanism as required by applicable data-protection law, such as an applicable European Commission adequacy decision or Standard Contractual Clauses, together with additional safeguards where required.

You may contact us for more information about safeguards applying to your data.

How do we protect your information?

Email addresses are transmitted using HTTPS/TLS and stored in an Amazon DynamoDB table in our own AWS account, encrypted at rest using AWS encryption.

Access is restricted to authorized systems and personnel.

How long do we keep it?

We retain your email address and its consent record for as long as you remain on the waitlist or subscribed to these communications. Records are removed when they are no longer needed for the purpose you gave them for or when you ask us to delete them.

After an unsubscribe or withdrawal, we retain a minimal suppression record so that we do not accidentally add or contact that address again. That record keeps your email address, which list it relates to, and when the withdrawal happened, and we keep it for as long as we run the mailing list.

The rest of the record is kept for five years after the withdrawal and then deleted.

If you would rather not wait, you can ask us to delete your data sooner and we will, apart from the minimal suppression record described above.

Unsubscribing and withdrawing consent

Today, the way to withdraw either consent is to email us at info@stemmixr.com. We have not sent any email yet, so there is not yet a link in one to unsubscribe from.

Every StemMixr email we do send will provide an easy way to unsubscribe, and we will update this page when that is in place.

Withdrawing marketing consent stops marketing emails. Withdrawing your waitlist consent removes you from the beta waitlist as well.

Unsubscribing is free.

Your data-protection rights

Depending on the circumstances, you have the right to:

• ask what personal data we hold about you and receive a copy;
• correct inaccurate personal data;
• ask us to delete your personal data;
• ask us to restrict certain processing;
• receive personal data you provided to us in a portable format where applicable;
• withdraw consent at any time;
• object at any time to the use of your personal data for direct marketing; and
• object to processing we carry out on the basis of legitimate interest, which here means the country code described under Where signups come from.

To exercise these rights, contact info@stemmixr.com.

We may need to verify that the request relates to your email address before acting on it.

Complaints

If you believe we have processed your personal data unlawfully, please contact us first so we can address the issue.

You also have the right to lodge a complaint with a data-protection supervisory authority.

If you are in Finland, the supervisory authority is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto). Information is available at tietosuoja.fi.

You may also have the right to complain to the supervisory authority in another EU or EEA country where you live or work.

Automated decisions

We do not use the waitlist data for automated decision-making or profiling that produces legal or similarly significant effects.

Changes to this policy

We may update this policy if the way we handle waitlist or email data changes.

If a change materially affects a purpose for which you previously gave consent, we will not simply treat your old consent as permission for the new purpose. Where required, we will ask for new consent.

The date at the top of this page shows when this policy was last updated.