Privacy Policy

The controller for personal data processed about you as a customer or website visitor is Maximum Effort Ay (Maximum Effort Avoin Yhtiö), a Finnish general partnership (Business ID 2937256-1, VAT FI29372561), registered at Wärtsilänkatu 4 A 26, 04410 Järvenpää, Finland, operating the “Lanetti” brand and the OMA customer portal at oma.lanetti.fi (the “Service”).

Postal address: Wärtsilänkatu 4 A 26, 04410 Järvenpää, Finland. Privacy contact: privacy@lanetti.fi.

This policy explains how we process personal data in line with the EU General Data Protection Regulation (GDPR) and Finnish data protection law.

Account data such as your name, email address, phone number, organisation name and billing details when you register or place an order.

Service data needed to provide hosting, domains, email, databases, VPS, automation, AI features and Photon image compression, including configuration, support tickets, usage metrics and audit logs.

Photon usage data, including API keys, compressed volume and request metadata when you use our WordPress image compression service.

When you use Nextcloud, the files, calendars, contacts, user accounts and share metadata stored in that workspace. See the Nextcloud Terms at /legal/nextcloud.

Payment and fraud-prevention data processed by our payment providers (such as Stripe and Kustom), including partial card or bank identifiers and transaction status. We do not store full card numbers on our servers.

Technical data such as IP address, browser type, device identifiers, API and MCP access logs, and server logs collected automatically when you use the Service or website.

Cookieless usage measurement on our websites and the OMA portal: pages viewed, the site or campaign link you arrived from, buttons clicked, sign-in results and errors you run into. Visits are counted with an anonymous key derived from your IP address and browser that changes every day. We do not store the IP address, set cookies or follow you from one day to the next. We use this on the basis of our legitimate interest in running, measuring and improving our websites and the Service (Article 6(1)(f)).

Communications you send us (support, sales, abuse reports) and referral programme data if you participate.

When you use AI features, prompts and context you submit may be sent to configured model providers; see section on AI processing below.

Lanetti Tools public diagnostics (tools.lanetti.fi and the no-auth MCP at tools.lanetti.fi/mcp): the domain names and http(s) URLs you ask us to check, plus the technical request data needed to run those checks and protect the service (for example client IP for rate limiting). See “Lanetti Tools” below.

To perform our contract with you: provide, maintain, bill and support the Service (Article 6(1)(b)).

To meet legal obligations such as accounting, tax and responding to lawful requests from authorities (Article 6(1)(c)).

For our legitimate interests in securing the platform, preventing fraud and abuse, enforcing our terms and improving the Service (Article 6(1)(f)), balanced against your rights.

To protect email delivery for all customers, incoming and outgoing email may be scanned automatically for spam, malware and phishing, and message details (sender, recipient, time, filter result) are logged for a limited time (Article 6(1)(f)). Our staff look at message content only when investigating abuse or a delivery problem you report.

With your consent where required, for example non-essential cookies, certain marketing messages or optional analytics (Article 6(1)(a)). You may withdraw consent at any time.

In-portal assistants (Moira), Crew agent subscriptions and translation or drafting tools process the content you submit to generate responses. Do not submit data you are not allowed to share with subprocessors.

Prompts may be sent to model providers we use to run Moira and Crew. We log tool use for security, billing and audit purposes. Crew metering is described in the Crew Terms.

TEKORI (tekori.app) builds and changes websites and apps from your instructions. Your messages, uploaded files and the generated project are sent to the AI model and image providers we use to run it, and pages you ask it to use as a reference are opened and read. Details are in the TEKORI Terms at /legal/tekori.

The content of TEKORI model calls is kept in our build logs for up to 90 days to run, debug and support your project, and is deleted earlier when you delete the project. We keep anonymous build statistics (for example cost, duration, checks passed and design scores) without your content to improve the service (Article 6(1)(f)).

We do not use the content you submit to Moira, Crew or TEKORI to train AI models. Model providers process it as our processors under their contracts with us.

Lanetti Tools is a free, read-only public diagnostics service (web UI and the MCP endpoint at https://tools.lanetti.fi/mcp). No Lanetti account or sign-in is required.

When you (or an AI assistant you use, such as ChatGPT) ask Lanetti Tools to run a check, the domain names and public http(s) URLs you submit are sent to Lanetti so we can perform the requested DNS, e-mail, SSL, redirect, SEO, speed, technology, subdomain or registration lookups. We may open those public targets from our infrastructure to produce the result.

We process this on the basis of our legitimate interest in providing and securing a free public tool (Article 6(1)(f)). Do not submit addresses you are not allowed to check. Private, loopback and metadata destinations are rejected.

We keep request metadata (for example client IP for rate limiting, tool name, target and timestamps) for a limited time for abuse prevention and reliability. We do not use Lanetti Tools check targets to build marketing profiles, and we do not sell that data.

When you use Photon, your WordPress site or an authorised client sends image bytes to our compression engines in Helsinki. We record usage, API keys and audit logs for billing and security. See the Photon Terms at /legal/photon.

Image bytes processed by Photon stay on Lanetti-operated engines in Finland. They are not sent to third-party AI model providers for compression.

Websites of our customers can offer the Accessiboss visitor panel. When you visit such a site, your browser loads the panel files and that site's panel settings from Lanetti's own servers in Finland. Like any website, our servers receive your IP address and browser details. We keep them only in our access logs, for about five weeks, to keep the service secure and running, on the basis of our legitimate interest (Article 6(1)(f)). Accessiboss uses no cookies and does not track you or build profiles of visitors.

The settings you choose in the panel, such as text size or contrast, are saved only in your own browser and are never sent to Lanetti. You can remove them with the panel's reset button or by clearing your browser's data for that site. The website you visited is responsible for its own content and privacy notice. Questions about our access logs: privacy@lanetti.fi. See the Accessiboss terms at /legal/accessiboss.

We primarily host customer data in the EU (Finland and Germany). Photon compression runs on engines in Finland. Some products may use a US region; where personal data is transferred outside the EEA we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

We do not sell your personal data. We share it only with processors necessary to run the Service, including infrastructure (Enhance, Hetzner), registrars (Cloudflare, Joker, Traficom), payment providers (Stripe, Kustom), email delivery (SendGrid or SMTP), CDN (Cloudflare), AI model and image providers we use for Moira, Crew and TEKORI (such as OpenAI), and support tooling. Each is bound by contract to protect data.

We keep personal data only as long as necessary to provide the Service and to meet legal, tax and accounting requirements (accounting records are retained for the statutory period under Finnish law).

TEKORI build logs (the content of model calls) are kept for up to 90 days. TEKORI projects stay until you delete them; anonymous build statistics contain no personal data.

You may access, rectify, erase, export or restrict the processing of your personal data, object to certain processing, and withdraw consent at any time.

To exercise these rights, contact privacy@lanetti.fi. You also have the right to lodge a complaint with the Finnish Office of the Data Protection Ombudsman (tietosuoja.fi).

Where we process personal data contained in content you host, we act as your processor under our Data Processing Agreement, which forms part of your contract with us.