Privacy policy
Last updated 22 September 2026
This policy describes how Softlandia processes personal data in Product Vision Studio.
Summary
- Conversation content and email addresses are processed only by Softlandia and its service providers.
- Conversation content is transmitted to OpenAI for processing, and to PostHog for review of the service.
- Email addresses are used to deliver the Brief and for one follow-up message.
- Personal data is not sold or disclosed to third parties for their own purposes.
- Data is erased on request.
Controller and contact
Softlandia Oy is the controller of the personal data described in this policy. Requests concerning this policy, including access and erasure requests, should be sent to luke.otwell@softlandia.com.
Personal data collected
- Email address, provided before the interview begins.
- Conversation content, comprising the responses entered during the interview.
- The Brief, generated from those responses.
No other personal data is requested or collected. Any further personal data contained in a response is processed as part of the conversation content.
Purposes and legal basis
Personal data is processed for the following purposes:
- Conducting the interview and generating the Brief.
- Delivering the Brief to the email address provided.
- One follow-up message from Softlandia concerning the session.
- Internal review of sessions to evaluate and improve the service.
The legal basis is consent under Article 6(1)(a) of the General Data Protection Regulation, given when the email address is submitted. Consent may be withdrawn at any time by contacting the address above. Withdrawal results in erasure and does not affect processing carried out before withdrawal.
Service providers
The following processors handle personal data on Softlandia’s behalf, under contract and on Softlandia’s instructions. They are not permitted to process it for their own purposes. Data submitted to the OpenAI API is not used to train OpenAI’s models.
| Processor | Purpose | Data processed |
|---|---|---|
| OpenAI | Generating the interview responses and the Brief | Conversation content and Brief text |
| PostHog | Product usage analytics and review of the AI interview | Usage events, conversation content, the Brief, and the email address |
| Railway | Application hosting and data storage | All stored data, at rest |
Disclosure
Personal data is not sold, and it is not disclosed to any party other than the processors listed above for that party’s own purposes.
Retention
Conversation content, the Brief and the email address are retained for as long as required for the purposes set out above, and are erased thereafter. Data is erased earlier on request.
In the analytics service, the conversation content recorded with each interview is deleted automatically 30 days after it is recorded. The Brief, the email address and the usage measurements are retained there for as long as required for the purposes set out above.
Rights of the data subject
Under the General Data Protection Regulation, a data subject has the right to access their personal data, to have inaccurate data rectified, to have data erased, to restrict or object to processing, and to receive their data in a portable format. Requests should be sent to luke.otwell@softlandia.com and are answered within one month.
A data subject also has the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland.
Security
Data is stored on a server operated for Softlandia and is transmitted over an encrypted connection. Each session is accessible only by means of a credential held by the browser that created it. Access to the server is restricted to Softlandia personnel.
Changes to this policy
This policy may be amended. The date at the top of this page indicates the version in force.