Website privacy policy
Updated: 18 October 2026
Lue suomeksi · Service privacy policy
This policy covers the public tulos.ai website. Processing in the web application and iOS and Android apps is described in our service privacy policy.
Controller
Blackreef Oy, Finnish Business ID 3555182-2, Hitsaajankatu 6, 00810 Helsinki, Finland. For privacy questions and requests, contact personal_data@tulos.ai.
Data collected and its sources
Delivering the website involves processing technical information such as your IP address, the requested page, request time, browser and device information. This information is generated through communication between your browser and the website’s infrastructure.
When you contact us, we process information you provide, such as your name, email address, company and message, to respond. The website’s contact form opens your email application; the message reaches us when you send it from that application.
With your consent, Google Analytics collects information about page visits, website usage, browsers, devices and traffic sources. Identifiers in campaign links may also be stored in cookies with your consent.
Purposes and legal bases
- Website delivery and security: our legitimate interest in maintaining a functioning, secure website and investigating misuse.
- Responding to enquiries: steps taken at your request before entering into a contract, or our legitimate interest in handling enquiries and business customer relationships.
- Optional analytics and campaign measurement: your consent. Declining does not prevent normal use of the website.
- Legal obligations: compliance with applicable law where an enquiry or other event creates such an obligation.
Cookies and browser storage
| Name | Purpose | Duration |
|---|---|---|
tulos-cookies-accepted | Essential storage remembering your cookie choice | Up to 12 months |
theme in browser local storage | Remembering your chosen light or dark theme | Until you clear site data or change the preference |
_ga and _ga_* | Optional Google Analytics visitor and usage measurement | Up to 12 months from the latest update |
utm_source, utm_medium, utm_campaign, ad_id | Optional campaign and traffic source attribution | Up to 30 days |
Your browser may shorten these periods. Apart from remembering your theme and cookie choice, the optional storage described above is enabled only after acceptance. Simply using the website does not constitute consent.
Google signals and advertising personalisation signals are disabled in the website configuration. Website analytics consent does not cover any permissions in the separate mobile app.
Changing your cookie choice
You can accept optional cookies or choose necessary cookies only in the cookie notice. Reopen it at any time using Cookie settings in the footer.
When you choose necessary cookies only, the website stops optional tracking and removes the analytics and campaign cookies it controls. If tracking was already running, the page reloads to unload the tracking library. Withdrawal does not affect the lawfulness of earlier processing. You can also clear site data in your browser settings.
Service providers and international transfers
We use hosting and technical services such as Google Cloud and Firebase Hosting to deliver the website. With your consent, we use Google Analytics. Fonts are loaded from Google Fonts, which involves your browser sending Google a technical web request including your IP address. Links to social media services are subject to those services’ privacy practices when you visit them.
Service providers process information under the applicable contracts and data protection obligations. We do not sell website visitors’ personal data. Providers may process data outside the EU and EEA. We use an applicable transfer mechanism, such as the European Commission’s Standard Contractual Clauses or an applicable adequacy decision. You can request further information and a copy of safeguards at our privacy contact address.
Further information: Google Privacy Policy and Google Analytics privacy information.
Retention and security
Cookie and local storage durations are listed above. We retain enquiries for as long as needed to handle them and any resulting customer relationship. Technical logs are retained as needed to operate and secure the website and investigate faults. Legal obligations and legal claims may require longer retention. Deleting a browser cookie does not itself delete information previously collected on a server.
We protect data through restricted access, protected data transmission and other appropriate technical and organisational measures.
Your rights
You can request access, correction, erasure or restriction of processing, and object to processing where the legal conditions are met. You can request data portability where applicable and withdraw consent at any time.
Send requests to personal_data@tulos.ai. We normally respond within one month. We may verify your identity before disclosing information. You may complain to the Office of the Data Protection Ombudsman.
Changes to this policy
We update this policy when the website or our processing practices change. The current version and update date are published on this page.