This Privacy Policy (the “Privacy Policy”) aims to inform you about our policies and procedures concerning the collection, use, and disclosure of information we receive when you access and use our website (the “Site”), services, software, mobile applications, content, and all other products and services (collectively, the “Services”) owned, controlled, or offered, directly or indirectly, by Bought Oy (including its subsidiaries and affiliates, “Bought”, “Company”, “we,” “our,” or “us”). We at Bought Oy prioritize the privacy of our users and are committed to using Personal Information (as defined below) strictly as outlined in this Privacy Policy. This Privacy Policy is an integral part of our Terms of Service. By using our Services, you confirm that you have read, understood, and agreed to this Privacy Policy and the Terms of Service and that you are at least 18 years old.

Unless otherwise specified in this Policy or in an at the time applicable Customer Agreement, Bought Oy (ID: 3475141-9) is the data controller and is responsible for ensuring that Personal Data is processed in compliance with this Policy and applicable data protection laws.

For any questions about this Policy, reach out to erik.kymalainen@gmail.com.

1. Definition of Personal Information

For the purposes of this Privacy Policy, "Personal Information" refers to any data that can identify an individual either directly or indirectly when combined with other information. This includes details that specifically identify a person or information that, when aggregated with other data, can be used to identify an individual.

2. Information We Collect

Information You Provide to Us

When you use our Services or communicate with us, we collect the information you provide directly. This includes information you share in various scenarios, such as:

• Using our mobile apps or visiting our website.
• Registering for the Services or creating an account.
• Accessing the Services via social networking sites or third-party services.
• Subscribing to newsletters.
• Making a purchase through the Site or mobile apps.
• Inviting friends to join the Services or sharing the Services on social media.
• Requesting technical support.
• Participating in other features of our Services where Personal Information is required.
• Signing up for newsletters.
• Contacting us through the Site or other communication channels.

You can choose not to provide certain information, but this may limit your ability to use some features of the Services. The types of information you may provide include, but are not limited to:

• Details provided during transactions or purchases using the Services (e.g., name, email address, and other information you choose to provide).
• Information shared via email or through the "Contact" section on the Site, including name, email address, phone number, and any other information you choose to provide.
• Subscription information for newsletters and updates, such as your email address and topic preferences. You may unsubscribe at any time by following the instructions provided in these communications.
• If you are one of our customers, suppliers, or prospects, we may collect limited Personal Information as part of our business relationship with you. This includes your name, company, title, email address, phone number, address, order details, and where applicable, credit registrations and credit limits.
• Transaction details and limited payment information (non-PCI).
• Any additional information you choose to share with us, including data related to recruitment or job applications.

Additionally, if you contact us, we may keep a record of that correspondence. If another user refers you to our Services by providing your email address, we may send you a message, but we will use your email address only to send that message unless you provide your information to us directly.

Email Account Information

In line with Google and Microsoft authentication procedures, we use sophisticated algorithms to scan and analyze email accounts to offer users attractive marketplace listings. Our algorithm searches your inbox for purchase confirmation emails from well-known retailers. Using machine learning models, we determine if an email contains a receipt and extract essential details such as purchase date, price, items purchased, and prices of the items. This information is then used to generate marketplace listings for the items.

Google Permissions

We may request certain Google permissions to register and authenticate you on our Services. By default, we access information such as your Google ID, email address, and contacts to help connect you to our Services and find new connections for you. We do not store any user’s email data or message content.

Microsoft Permissions

Similarly, we may request permissions for Microsoft accounts (e.g., Hotmail, Outlook, msn.fi) to register and authenticate you on our Services. By default, we access information such as your Microsoft account ID, email address, and contacts to help connect you to our Services and find new connections for you. We do not store any user’s email data or message content.

Compliance with Google Limited Use Policy

The Services’ use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.

Automatically Collected Information

Most data we collect through the Site and Services is technical and collected automatically via APIs, SDKs, cookies, and similar technologies. This data may include:

• Device data (e.g., advertising ID, device type, operating system, precise location data).
• Usage data (e.g., search terms, pages visited).
• Network and internet information (e.g., IP addresses, URLs, Wi-Fi access points).
• Information collected via cookies (see “How We Use Cookies and Other Technologies” below).

Information You Share on Third-Party Websites or Social Media Services

Our Services may include links to third-party websites and social media services where you can post comments, stories, reviews, or other information. Your use of these third-party services may result in the collection or sharing of your information by these services. We encourage you to review the privacy policies and settings of any third-party websites and social media services you use.

3. How We Use Cookies and Other Technologies

Some features on our Site and Services require the use of “cookies” – small text files stored on your device’s hard drive. We use cookies to measure which pages are accessed and which features are most frequently used, enabling us to continuously improve the Site to meet the needs of our visitors. Here is how we use different categories of cookies and your options for managing cookie settings:

We and our service providers may also use “pixel tags,” “web beacons,” “clear GIFs,” or similar technologies to track the actions of users, gauge the effectiveness of marketing campaigns, and compile aggregate statistics about Site usage.

4. Use of Collected Information

We use the information you provide to us for the following purposes:

• To provide and improve our Services: We use your information to operate, maintain, and enhance our Services, including creating marketplace listings from your purchase confirmation emails.
• To personalize your experience: We use your information to personalize the Services, including suggesting relevant listings and offers.
• To communicate with you: We use your information to send you updates, newsletters, and other communications. You can opt-out of receiving these communications at any time.
• To ensure security: We use your information to ensure the security of our Services and protect against unauthorized access, use, or disclosure.
• To comply with legal requirements: We use your information to comply with applicable laws, regulations, and legal processes.
• To enforce our Terms of Service: We use your information to enforce our Terms of Service and other policies.
• To analyze and improve our Services: We use your information to understand how our Services are used and to make improvements.

In addition to the above purposes, we use information collected automatically to monitor and analyze the use of our Services, improve our Site and Services, generate aggregated data and insights, and verify that users meet the criteria required to process their requests.

5. Third Parties We Share Personal Information With

We may share your Personal Information with the following categories of third parties:

• Service providers: We share information with service providers who perform services on our behalf, such as payment processing, data storage, hosting services, marketing services, and communications services. These providers are contractually obligated to protect your information and use it only for the purposes specified by us.
• Advertising partners: In compliance with applicable laws, we may share information with our advertising partners to present relevant advertisements within our Services.
• Public authorities: We may disclose information to public authorities such as law enforcement if we are legally required to do so or need to protect our rights or the rights of third parties.
• Subsidiaries and affiliates: We may share information with our subsidiaries and affiliates to support our business operations.
• Corporate transactions: In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred to the new owner. In such cases, the new owner will be required to adhere to the terms of this Privacy Policy.

We do not share text messaging originator opt-in data and consent with any third parties.

6. Links to Other Websites

Our Services may contain links to other websites or social media platforms that are not operated by us. These third-party websites and services have their own privacy policies, and we do not accept any responsibility or liability for their policies. Your interactions with these third-party websites and services are governed by their respective privacy policies.

We encourage you to review the privacy policies and terms of these third-party websites and services before using them or sharing any Personal Information. We have no control over and are not responsible for the content, privacy policies, or practices of any third-party websites or services.

7. Security

We understand the importance of protecting your Personal Information and have implemented a variety of industry-standard security measures to safeguard your data from unauthorized access, use, or disclosure. These measures include physical, electronic, and administrative procedures to secure the information we collect and store.

However, please be aware that no security system is impenetrable, and we cannot guarantee the absolute security of your Personal Information. In the event of a security breach, we will notify you and the relevant authorities as required by applicable law.

We also encourage you to take steps to protect your information, such as using strong passwords, keeping your login details confidential, and logging out of your account when you have finished using our Services.

8. Managing Your Privacy

We retain your data on your behalf and for your benefit. You have the right to access, correct, delete, or restrict the use of your Personal Information. Here’s how you can manage your privacy:

• Access and Update Information: You can access and update your account information by logging into your account on our Services.
• Deletion Requests: If you wish to delete your account or any Personal Information we hold about you, you can contact us at erik.kymalainen@gmail.com. We will process your request and delete your information within seven business days, subject to any legal obligations that require us to retain certain data.
• Restriction Requests: You can also contact us to restrict the processing of your Personal Information in certain circumstances.

If you have any questions or need further assistance, please contact us at erik.kymalainen@gmail.com.

9. Your Rights

Under applicable data protection laws, you have the following rights regarding your Personal Information:

• Right of Access: You have the right to request copies of your Personal Information that we hold.
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to Erasure: You have the right to request that we erase your Personal Information, under certain conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your Personal Information, under certain conditions.
• Right to Object to Processing: You have the right to object to our processing of your Personal Information, under certain conditions.
• Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. To exercise any of these rights, please contact us at:

• Email: erik.kymalainen@gmail.com
• Phone Number: +358440905977
• Address: Temppelikatu 19 D 54, 00100 Helsinki

If you believe that our processing of your Personal Information is not in line with data protection laws, you have the right to file a complaint with your national data protection authority in the EU/EEA, or the data protection authority in any other EU country where you live, work, or where you believe the violation has occurred.

10. International Transfers of Personal Information

Bought Oy is based in Finland, and the Personal Information we collect is processed and stored in Finland and other countries where we or our service providers operate. As a result, your Personal Information may be transferred to, stored, and processed in countries outside of your country of residence. These countries may have data protection laws that are different from those of your country.

Whenever we transfer your Personal Information internationally, we will take appropriate steps to ensure that your information is treated securely and in accordance with this Privacy Policy. This includes implementing appropriate safeguards, such as standard contractual clauses approved by the European Commission, to protect your Personal Information.

11. Data Retention

We retain your Personal Information only for as long as is necessary to fulfill the purposes for which it was collected, to provide our Services, to resolve disputes, to establish legal defenses, to conduct audits, to pursue legitimate business purposes, and to comply with applicable laws.

Once we no longer need to retain your Personal Information for the purposes outlined above, we will either delete it or anonymize it in a way that it can no longer be used to identify you. If you request the deletion of your Personal Information, we will comply with your request in accordance with applicable laws, unless we are required or permitted to retain certain information for specific legal or operational reasons.

12. Changes to the Privacy Policy

Our Privacy Policy is periodically reviewed and updated to reflect changes in our practices, technologies, legal requirements, and other factors. We will notify you of any significant changes by posting the updated Privacy Policy on our website and indicating the date of the latest revision. If the changes are material, we will provide a more prominent notice, such as sending you an email notification.

We encourage you to review this Privacy Policy regularly to stay informed about how we are protecting your Personal Information. Your continued use of the Services after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

13. Contacting Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Name: Bought Oy
• Address: Temppelikatu 19 D 54, 00100 Helsinki
• Email: erik.kymalainen@gmail.com
• Phone Number: +358440905977
• Website: https:/bought.app

We are committed to addressing your inquiries and resolving any issues you may have regarding the use of your Personal Information.