Privacy Policy

1. Data we collect

We may collect the following categories of personal data:

• Name
• Email address
• Phone number
• Company name and website URL
• Inquiry details submitted through forms or our AI chatbot
• Business communication history with our team
• Technical website usage data (cookies, analytics, IP-related technical information where applicable)

We do not intentionally collect special categories of personal data. Please do not submit sensitive information (such as health, financial account credentials, or government identifiers) through our chatbot or contact forms.

2. AI chatbot disclosure

Our website uses an AI-powered chatbot to assist visitors. Conversations with the chatbot may be processed by third-party large language model providers (such as OpenAI) for the sole purpose of generating responses and improving service quality. Messages may be logged for security, quality assurance, and follow-up. Do not share confidential, sensitive, or regulated personal data through the chatbot.

3. Purpose of processing

• Responding to inquiries and customer requests
• Providing AI chatbot, automation, and lead-generation services
• Sales communication and client onboarding
• Project delivery, account management, and support
• Website analytics and service improvement
• Legal compliance, fraud prevention, and security

4. Legal basis for processing

• Legitimate interest — for B2B communication, service inquiries, and security.
• Consent — where required for marketing, non-essential cookies, or analytics.
• Contractual necessity — when delivering services to clients.
• Legal obligation — where required by Finnish or EU law.

5. Third-party service providers

We rely on carefully selected processors to operate our services, including:

• AI processing platforms (e.g. OpenAI)
• CRM and lead-management systems
• Cloud hosting providers (preferably EU-hosted)
• Email and communication platforms
• Web analytics providers
• Workflow and automation platforms

These providers process data only as necessary to deliver their services and under appropriate data protection agreements. Where data is transferred outside the EEA, we rely on EU Standard Contractual Clauses or equivalent safeguards.

6. Data retention

We retain personal data only for as long as necessary for the purposes described in this policy and to meet legal, accounting, and contractual obligations. Lead and inquiry data is reviewed periodically and deleted when no longer required.

7. Your GDPR rights

Under the GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Withdraw consent where processing is based on consent
• Data portability where applicable
• Lodge a complaint with a supervisory authority (in Finland: the Office of the Data Protection Ombudsman, tietosuoja.fi)

To exercise any of these rights, please contact us using the details below.

8. Cookies

Our website uses cookies and similar technologies for functionality, analytics, and (where applicable) marketing. Where consent is required, you will be presented with a cookie banner. For details, see our Cookie Policy.

9. Security

We apply appropriate technical and organisational measures — including encryption in transit, access controls, and EU-hosted infrastructure where feasible — to protect personal data against unauthorised access, alteration, disclosure, or destruction.

10. Contact

BluePeak AI
Email: hello@bluepeak.ai
For privacy-related requests: privacy@bluepeak.ai

11. Updates to this policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. The latest version will always be available on this page.