Privacy notice

Controller

Merivirta Digital Oy, Logomo, Junakatu 9, 20100 Turku, Finland. Contact person Jere Merivirta, email , phone .

What data we process

AI assistant: the messages you write and the replies, the page address, the language and a random session identifier. IP addresses are not stored.

Contact request through the assistant (in the chat or in the quick form that opens inside the assistant): your email address and, if you give them and agree to be contacted, your name, phone number, company and a description of your need. The messages of the same conversation are attached to the request.

The site has no separate contact form. If you email or call, your message is handled as ordinary email or a phone call.

WhatsApp: when you message Merivirta Digital's WhatsApp number, we process your phone number, your WhatsApp profile name and the messages with their times. The messages reach our customer service system through Meta's WhatsApp Business API (Meta Platforms Ireland Ltd). The assistant Virta may answer, and its first reply says it is an AI. Tasks agreed in a conversation may be recorded on the client's task cards. Voice messages are turned into text with ElevenLabs speech recognition (ElevenLabs, Inc., United States); we store only the text, not the audio. The transfer outside the EU is based on standard contractual clauses.

Purpose and legal basis

We answer your questions and contact requests and prepare a possible offer. The basis is legitimate interest (starting a customer relationship and improving the service) and, for contact requests, your consent.

The assistant makes no decisions about you. Prices are examples; the final offer always comes from Jere Merivirta.

Retention

Assistant and WhatsApp conversations are deleted automatically after 90 days and contact requests after 365 days, unless they lead to a customer relationship.

Processors and transfers

The site and the assistant server run on Render (Render Services, Inc.) in the EU, in its Frankfurt data centre.

The assistant's replies are generated by Anthropic's Claude AI (Anthropic PBC, United States). Your messages are sent to Anthropic to generate the reply. The transfer outside the EU is based on the European Commission's standard contractual clauses. Anthropic does not use data sent through its API to train its models.

Traffic to the site and the admin passes through Cloudflare's network (Cloudflare, Inc., United States), which handles it in its nearest data centre. The transfer outside the EU is based on standard contractual clauses.

Data is never sold or shared for marketing. Data is disclosed to authorities only when the law requires it: we check that the request is lawful, challenge an unlawful request, disclose only what is necessary and record every request.

Cookies and embeds

The site uses no analytics or advertising cookies. Fonts are served from our own server.

The assistant keeps your conversation in your browser tab’s session storage (sessionStorage) so it continues when you move between pages. It is removed when you close the tab.

App videos load from YouTube (youtube-nocookie.com) only after you press play. YouTube may then process your data under its own terms.

Social media publishing (Merivirta Publisher)

We publish our own content to our own accounts on LinkedIn, Facebook, Instagram, YouTube and TikTok with our own tool. For this we store each account’s access token, encrypted, and the account’s identifier and name. We read only the comments and statistics of our own posts, and use them to improve our content.

The data is kept in Render’s Frankfurt data centre. An access token is deleted when the account is disconnected, and access can also be revoked in the platform’s settings. The data is not shared with anyone.

Finding business customers (B2B)

We look for potential business customers in public sources: online stores’ own pages, the Finnish Trade Register’s open data (YTJ), the open data of Traficom’s fi domain name register (company-held names only, CC BY 4.0) and public reviews in the Shopify App Store. Our scanner identifies itself as MerivirtaStoreScanner and obeys each site’s robots.txt. We store the company’s details, the names, roles and work contact details of people published on its pages, and the address of the page each detail came from.

The legal basis is legitimate interest: we offer Shopify services and apps to businesses whose work they relate to. The data is not sold or shared. If you do not want to be contacted, reply to our message or write to jere@merivirta.com, and we delete the data and add the company or address to our do-not-contact list. The data is kept in Render’s Frankfurt data centre.

Your rights

You can ask for access to your data, its correction or deletion, object to processing or withdraw your consent by writing to email . You can also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).