Privacy notice

1. Scope and controller

Perplatform Oy is the controller of personal data processed for this public company website and inquiries about Perplatform, Bodyper, Eatper, Scoreper, or related professional matters. This notice does not govern privacy practices inside the Bodyper, Eatper, or Scoreper applications, which require their own product-specific notices.

2. Personal data processed

Perplatform may process the following categories of data:

• Inquiry data: name, email address, subject, message, organisation or role if you include it, and any other information you voluntarily provide.
• Technical and security data: IP address, timestamps, requested pages, browser and device information, network and request metadata, Turnstile results, and delivery identifiers generated by the hosting, security, and email services.
• Correspondence data: replies, follow-up messages, and information needed to manage the resulting business relationship.

The data comes from you and from the technical services used to operate and protect the website. Please do not submit passwords, payment-card details, health information, identity documents, or other unnecessary sensitive information.

3. Purposes and legal bases

• Responding to inquiries and taking requested steps: processing is based on steps taken at your request before a possible contract, or performance of a contract where applicable (GDPR Article 6(1)(b)).
• Managing ordinary professional correspondence: processing is based on Perplatform’s legitimate interest in communicating about the company and its products (Article 6(1)(f)).
• Operating and protecting the website: technical data is processed based on the legitimate interest in providing a reliable service, preventing spam and abuse, and protecting systems and users (Article 6(1)(f)).
• Compliance and legal claims: data may be processed to comply with a legal obligation (Article 6(1)(c)) or to establish, exercise, or defend legal claims.

The processing described in this notice is not based on consent. When legitimate interests are relied on, Perplatform balances those interests against the rights and reasonable expectations of the person concerned.

4. Contact form and Turnstile

The contact form validates its fields in your browser and sends the submitted data to the separate Perplatform backend. The form uses Cloudflare Turnstile to distinguish legitimate visitors from automated abuse. Turnstile may process signals such as the client IP address, TLS fingerprint, user-agent header, site key, and originating hostname. Cloudflare states that Turnstile does not access, store, or transmit the form entries or other page inputs.

The backend validates the one-time Turnstile token before it asks Resend to deliver the message to the Perplatform mailbox. The backend does not place the message in a website database and does not log the message body, email address, or Turnstile token. A successful confirmation means the contact service accepted the message for delivery; it does not guarantee that every later email-routing step will succeed.

5. Recipients and service providers

Access inside Perplatform is limited to people who need the data to handle the inquiry. The following providers process data only as needed for their stated role:

• Vercel: hosts the website and contact backend and processes necessary request, deployment, and security data. Vercel privacy notice.
• Cloudflare: provides Turnstile abuse prevention and processes browser and network signals for bot detection. Turnstile privacy addendum.
• Resend (Plus Five Five, Inc.): transmits the contact message and processes delivery metadata. Resend privacy policy.
• Hostinger: provides the Perplatform mailbox that receives and stores the delivered correspondence.

Data may also be disclosed to professional advisers, authorities, or other recipients when necessary to comply with law, protect rights and security, or establish, exercise, or defend legal claims. Perplatform does not sell inquiry data.

6. International transfers

Some providers or their subprocessors may process data outside Finland or the European Economic Area, including in the United States. Where Chapter V of the GDPR requires a transfer safeguard, transfers are covered by an applicable adequacy decision or contractual safeguards such as the European Commission’s Standard Contractual Clauses, together with additional safeguards where required. You may request more information about applicable safeguards by contacting Perplatform.

7. Retention

Ordinary inquiries and related correspondence are deleted or anonymised within 24 months after the last meaningful contact. Data may be kept longer when an inquiry leads to an ongoing customer, supplier, or other business relationship, or when retention is necessary for accounting, another legal obligation, dispute resolution, or legal claims. In those cases, data is kept only for the applicable relationship or statutory period and then deleted or anonymised.

The backend does not retain a separate website copy of the message. Hosting, security, email-delivery, and mailbox providers retain technical records and backups according to their service schedules and legal obligations.

8. Cookies, analytics, and external resources

Perplatform does not use advertising trackers, behavioural analytics, marketing cookies, or external font services on this website. The contact form loads Turnstile, which uses strictly necessary browser and device signals and related technologies for security and bot detection. Those signals are not used by Perplatform for advertising or behavioural analytics.

9. Your rights

Subject to the conditions and exceptions in data-protection law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, or data portability where applicable. You may object, on grounds relating to your particular situation, to processing based on legitimate interests.

Send a request to toni.leivo@perplatform.com. Requests are handled without undue delay and normally within one month. Perplatform may request reasonable information needed to verify identity. You can read more about these rights on the European Commission’s data-protection page.

10. Complaints

If you believe that personal data has been processed unlawfully, you may lodge a complaint with a competent supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman. Its current guidance and contact channels are available at tietosuoja.fi. You also have the right to seek a judicial remedy.

11. Required information and automated decisions

You are not legally or contractually required to use the contact form. Its name, email, subject, and message fields are needed to route and respond to a message; without them, the form cannot be submitted. You may instead email toni.leivo@perplatform.com directly.

Perplatform does not use the submitted data for automated decision-making or profiling that produces legal or similarly significant effects. Turnstile automatically assesses whether a form interaction appears abusive. If it prevents submission, the direct email channel remains available.

12. Changes to this notice

This notice may be updated when the website, providers, or legal requirements change. The current version and effective date are always published on this page.