SOLVI PRIVACY POLICY

Last updated: 18 March 2026
Company: Solviapp Oy
Business ID (Y-tunnus): 3562379-3
Address: Castréninkatu 20 B 29, 00530 Helsinki, Finland
Email: support@solvi.fi

1. Introduction

Solviapp Oy ("Solvi", "we", "our", "us") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our mobile application, website, and related services (together, "Services"). It should be read together with our Terms of Use and Cookie Policy.

This Policy is based on the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Finnish Data Protection Act (1050/2018).

2. Data Controller

Solviapp Oy acts as the Data Controller for personal data processed through our Services.

Stripe Payments Europe Ltd acts as a data processor for payment processing activities carried out on behalf of Solviapp Oy. For certain activities of its own — including fraud prevention, financial crime compliance, and regulatory obligations — Stripe acts as an independent data controller subject to its own privacy policy available at stripe.com/privacy.

Signicat AS acts as a data processor for identity verification services provided to Solviapp Oy. Where Suomi.fi authentication is used, the Finnish Population Register Centre acts as a separate data controller for that authentication step.

3. Personal Data We Collect

3.1 Data you provide directly

• Name, surname, email address, and phone number

• Login credentials and authentication tokens

• Payment and billing details processed via Stripe

• Profile information and service preferences

• Chat messages and support communications

3.2 Data collected automatically

• Device information such as operating system and model

• IP address and approximate location data

• Usage statistics including pages visited, interaction events, and session duration

• Cookies and similar tracking technologies (see Cookie Policy)

3.3 Data received from third-party services

• Identity verification results from Signicat AS or Suomi.fi

• Payment status and transaction records from Stripe Payments Europe Ltd

• Aggregated analytics and event data processed by Google Ireland Ltd, Meta Platforms Ireland Ltd, and Mixpanel Inc on our behalf

4. Purposes and Legal Bases

We process personal data only where a lawful basis exists under the GDPR. The table below sets out the main purposes and the corresponding legal bases.

Where we rely on legitimate interest as a legal basis, Users have the right to object to such processing. See Section 8 for how to exercise this right.

5. AI and Automated Decision-Making

Solviapp Oy may use algorithmic or AI-driven systems to improve service reliability, match Customers with suitable Providers, or generate trust and safety scores. These systems may take into account transaction history, verified identity status, review patterns, and platform activity.

No automated process produces decisions with legal or similarly significant effects on a User without human review. If you believe an automated process has affected your access to the Platform or your account status, you have the right to request human review of that decision by contacting support@solvi.fi. We will acknowledge your request within a reasonable time and provide a substantive response describing the outcome of the review.

You may also object to AI-based profiling at any time by contacting support@solvi.fi, in accordance with GDPR Article 21.

6. Data Sharing and Transfers

We share personal data only to the extent necessary for the purposes described in this Policy. The table below identifies our main data recipients and their roles.

Sharing between Customers and Providers. To facilitate the booking and performance of Services, we share necessary contact details — such as name, phone number, and service address — between the Customer and the selected Provider. This sharing occurs only after a Booking has been confirmed and solely for the purpose of performing the relevant Service. Providers are required to treat such data as confidential and may not use it for any purpose unrelated to the Booking, as set out in the Terms of Use.

International transfers. Where personal data is transferred outside the EU or EEA, Solviapp Oy ensures compliance with GDPR Chapter V using one or more of the following mechanisms:

• European Commission Standard Contractual Clauses (SCCs)

• EU–US Data Privacy Framework (DPF), where the recipient is certified — this applies to Google LLC, Meta Platforms Inc, and Mixpanel Inc

• European Commission adequacy decisions where applicable

7. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law.

After the applicable retention period, data is deleted or anonymised in a manner that prevents re-identification.

8. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access — obtain a copy of the personal data we hold about you

• Right to rectification — request correction of inaccurate or incomplete data

• Right to erasure — request deletion of your data where no lawful basis for retention exists

• Right to restriction — request that we limit processing of your data in certain circumstances

• Right to object — object to processing based on legitimate interest, including profiling

• Right to data portability — receive your data in a structured, machine-readable format

• Right to withdraw consent — withdraw any consent given at any time, without affecting the lawfulness of processing prior to withdrawal

• Right to human review — request human review of any automated decision that affects you significantly

To exercise any of these rights, contact us at support@solvi.fi. We will respond within one month of receiving your request. In complex cases we may extend this period by a further two months, in which case we will notify you.

You may also file a complaint with the Finnish Data Protection Ombudsman:

Tietosuojavaltuutetun toimisto
PL 800, 00521 Helsinki, Finland
Website: tietosuoja.fi

9. Data Security

We implement technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS encryption for all data in transit

• Encrypted databases and encrypted backups

• Role-based access controls limiting data access to authorised personnel

• Regular security auditing and monitoring of access events

• Data minimisation and pseudonymisation practices where appropriate

No method of electronic transmission or storage is entirely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Finnish Data Protection Ombudsman within 72 hours and affected individuals without undue delay, as required by GDPR Article 33 and 34.

10. Children's Privacy

Our Services are not directed at or intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that personal data has been collected from a person under 18, we will delete that data promptly. If you believe we have inadvertently collected data from a minor, please contact us at support@solvi.fi.

11. Changes to This Policy

We may update this Policy from time to time to reflect changes in our Services, legal obligations, or data processing practices. The latest version is always available at www.solvi.fi/privacy.

Where changes materially affect your rights or the way we process your data, we will notify you by email or through an in-app notice before the changes take effect.

12. Contact

For any questions, concerns, or requests relating to this Policy or to your personal data:

Solviapp Oy
Castréninkatu 20 B 29, 00530 Helsinki, Finland
Email: support@solvi.fi
Business ID: 3562379-3