Building software products for European businesses

Last updated: March 2026

1. Who We Are

Yutori Solutions Oy (business ID: 3601516-7) is a company registered in Finland with its registered office at Hämeenkatu 14 C 32, c/o Cirit Oy, 33100 Tampere, Finland. We operate SaaS products including AI Act Fundamentals. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR).

Roles under GDPR: Yutori Solutions Oy acts as a data controller for the operation of its platforms, user account management, certificate issuance, and service improvement. Where your organisation subscribes to a service and its employees use the platform, your organisation is the data controller for its employees' data and Yutori Solutions Oy acts as a data processor on the organisation's behalf, as described in our Terms of Service.

2. Data We Collect

• Account information: name, email address, company name and organisation details when you register or are invited.
• Training data: training progress, completion status, quiz answers and scores, certificate generation and access records.
• Payment information: payment card details are processed directly by Stripe and are never stored on our servers.
• Technical data: IP address, browser type, and access times collected via server logs for security and service improvement.

If your employer invited you: When a company administrator adds you to a platform, we receive your name and email address from your organisation. Your employer is the source of this data and should have informed you that your details would be shared with us for training purposes. All information in this privacy policy applies equally to data received from your employer as to data you provide directly.

3. Why We Collect Your Data

• To provide our services and track your progress.
• To generate and verify completion certificates.
• To allow company administrators to monitor team training completion.
• To send service-related communications (e.g., invitation links, completion notifications).
• To process payments and send purchase confirmations.
• To improve our services and user experience.
• To comply with legal obligations (e.g., Finnish accounting law).

4. Data Recipients

We share your personal data with the following categories of recipients, all of whom process data on our behalf under Data Processing Agreements (DPAs) that comply with GDPR:

• Cloud hosting provider — our platforms and data are hosted within the EU.
• Email delivery service — service-related emails (invitations, notifications) are sent via a third-party email provider.
• Analytics tools — we use analytics services to understand how platforms are used and to improve the service.
• Payment processor (Stripe) — subscription payments are processed by Stripe.

We do not sell your personal data to third parties. We may also disclose data to legal or regulatory authorities when required by Finnish or EU law.

5. Legal Basis for Processing

We process your personal data on the following legal grounds under GDPR:

6. Data Retention

We retain your personal data for the duration of your organisation's subscription. After the subscription ends:

• Account, training, and certificate data (name, email, progress, quiz results, certificate records): deleted when the organisation's subscription ends.
• Technical logs (IP address, browser data): deleted within 6 months.
• Billing data: retained as required by Finnish accounting law (Kirjanpitolaki).

After the applicable retention period, data is securely deleted or irreversibly anonymised.

7. Your Rights (GDPR)

As a data subject in the EU, you have the following rights:

• Right of access: request a copy of your personal data.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests.
• Right to restrict processing: request limitation of processing in certain circumstances.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: you have the right to lodge a complaint with a supervisory authority (see below).

How to exercise your rights: Send your request to support@yutori.fi. We will verify your identity and respond within 30 days. If your request is complex, we may extend this by a further 60 days and will notify you of the extension within the original 30-day period. There is no fee for your first request; we may charge a reasonable fee for manifestly unfounded or excessive requests.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption in transit and at rest, access controls, and regular security assessments.

Our platforms and data are hosted within the European Economic Area (EEA). Some of our service providers, including our payment processor Stripe, may process data outside the EEA as part of their global operations. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses or adequacy decisions by the European Commission.

9. Cookies

Our platforms use cookies and similar technologies to ensure the service functions correctly and to improve your experience:

• Essential cookies: required for the platform to function (e.g., session authentication, language preferences). These do not require consent.
• Analytics cookies: used to understand how platforms are used and to identify areas for improvement. These are only set with your consent.

You can manage your cookie preferences through our cookie consent banner when you first visit a platform, and at any time through your browser settings. Disabling essential cookies may prevent the service from functioning correctly.

We use server-side logging to record IP addresses and access times for security purposes. These logs are retained for 6 months and are not used for tracking or profiling.

10. Supervisory Authority

You have the right to lodge a complaint with the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), Lintulahdenkuja 4, 00530 Helsinki, Finland. Website: tietosuoja.fi.

11. Contact

For privacy-related inquiries: support@yutori.fi

Last updated: March 2026

Our services are designed for business and organisational use. By subscribing, you represent that you are acting on behalf of an organisation in a professional capacity.

1. Cancellation

You may cancel your subscription at any time through the cancellation function in the platform. Cancellation takes effect at the end of the current paid billing period, and you will retain access until then. No pro-rata refunds are provided for the remaining period.

2. Refunds

Refunds are provided in the following circumstances:

• Termination by us without cause: if we terminate your subscription for any reason other than a breach of terms, we will refund any prepaid fees for the unused portion of the subscription period on a pro-rata basis.
• Material service changes: if we make changes that materially reduce the functionality you have paid for, you may terminate without penalty and receive a pro-rata refund of prepaid fees.

3. Failed Payments

If a payment fails, we will notify you and may suspend access until payment is received. Your subscription remains active for 14 days to allow you to resolve the payment issue.

4. How to Request a Refund

Contact us at support@yutori.fi with your order details. We aim to respond within 3 business days. Approved refunds are processed to the original payment method within 5–10 business days.

Last updated: March 2026

These Terms of Service ("Terms") govern your use of services provided by Yutori Solutions Oy ("we", "us"). By purchasing or using our services, you agree to these Terms.

1. Services

We provide digital products and SaaS services, including online training courses (via AI Act Fundamentals) and other tools. Service descriptions and pricing are listed on this website and on the respective product websites. Our services are designed for business and organisational use. By subscribing, you represent that you are acting on behalf of an organisation in a professional capacity.

2. User Obligations

By using our services, you agree to:

• Provide accurate information during registration and use.
• Use the service only for its intended purpose.
• Not share your account credentials or invitation links inappropriately.
• Not reproduce, distribute, or create derivative works from our content.
• Comply with all applicable laws and regulations.

3. Accounts

You may need to create an account to use our services. You are responsible for maintaining the security of your account credentials.

4. Fees and Payment

• Payment method: payments are processed securely via Stripe using a credit or debit card. We do not store your card details; all payment data is handled by Stripe in accordance with PCI DSS standards.
• Currency: all prices are in EUR (€) and exclude VAT, which is added where applicable.
• Billing cycle: subscriptions are billed annually in advance unless otherwise agreed.
• Renewal: subscriptions renew automatically at the end of each billing period. We will notify you at least 30 days before renewal.
• Cancellation: you may cancel your subscription at any time. Cancellation takes effect at the end of the current paid billing period. No pro-rata refunds are provided for the remaining period.
• Failed payments: if a payment fails, we will notify you and may suspend access until payment is received. Your subscription remains active for 14 days to allow you to resolve the payment issue.

5. Educational Content Disclaimer

The training content provided through our platforms is for educational purposes only and does not constitute legal advice. While we strive to provide accurate and up-to-date information, this content should not be relied upon as a substitute for professional legal counsel. Completing any training does not guarantee compliance with applicable regulations. Your organisation is solely responsible for its own compliance assessments and implementations. Organisations should consult qualified legal professionals for specific compliance guidance.

6. Data Protection and Privacy

Your use of our services is subject to our Privacy Policy (above), which describes how we collect, use, and protect personal data.

Data processing terms (GDPR Art. 28): Where your organisation acts as a data controller and Yutori Solutions Oy processes personal data on your behalf, the following terms apply automatically as part of these Terms of Service:

• Scope of processing: we process personal data (names, email addresses, training progress, quiz results, and certificate records) solely for the purpose of providing the service as described in these Terms.
• Instructions: we process personal data only on your documented instructions, unless required by EU or Finnish law.
• Confidentiality: all personnel authorised to process personal data are bound by obligations of confidentiality.
• Security measures: we implement appropriate technical and organisational measures as described in our Privacy Policy.
• Sub-processors: we use sub-processors (as described in our Privacy Policy) and will inform you of any changes, giving you the opportunity to object.
• Data subject rights: we assist you in fulfilling your obligations to respond to data subject requests.
• Deletion: upon termination or upon your request, we will delete or return personal data in accordance with our Privacy Policy retention schedule.
• Audit rights: we make available information necessary to demonstrate compliance with GDPR Art. 28 and allow for audits upon reasonable notice.

By accepting these Terms, you also accept these data processing terms. No separate signature is required.

7. Intellectual Property

All training content, materials, quizzes, graphics, logos, software, and certificates ("Materials") are the property of Yutori Solutions Oy or its licensors and are protected by copyright and other intellectual property laws.

Your licence: We grant your organisation a limited, non-exclusive, non-transferable licence to:

• Access and use Materials on the platform for internal employee training.
• Print and store completion certificates for organisational records and compliance documentation.
• Share completion reports with relevant managers within your organisation.

Restrictions: You may not:

• Reproduce, redistribute, or publish Materials outside the platform.
• Create derivative works, adaptations, or translations of Materials.
• Use Materials to develop competing products or services.
• Remove copyright notices or proprietary markings.
• Share login credentials or allow unauthorised access to the platform.

Completion certificates issued through our services remain valid as documentary proof of training completion. Certificate verification through the platform is available only during an active subscription. After subscription termination, account and training data is deleted in accordance with our Privacy Policy, and online verification is no longer available.

8. Limitation of Liability

To the maximum extent permitted by law, Yutori Solutions Oy shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of or inability to use the service. Our total liability shall not exceed the amount paid by you or your organisation for the service in the twelve (12) months preceding the claim.

9. Suspension and Termination

Termination by us for cause: We may terminate or suspend your access in the following circumstances:

• Immediate suspension: if you breach intellectual property restrictions, compromise platform security, or engage in illegal activity, we may suspend access immediately with written notice.
• Termination for material breach: if you materially breach these Terms and fail to remedy the breach within 30 days of written notice, we may terminate your subscription.
• Termination for non-payment: if payment is overdue for more than 30 days, we may suspend access and terminate the subscription with 14 days' written notice.

Termination by us without cause: We may terminate your subscription for any reason by providing at least 90 days' written notice. In such cases, we will refund any prepaid fees for the unused portion of the subscription period on a pro-rata basis.

Service changes and discontinuation: We reserve the right to modify, limit, or discontinue the service (or any part of it) with at least 90 days' written notice. If a change materially reduces the functionality you have paid for, you may terminate without penalty and receive a pro-rata refund of prepaid fees.

Termination by you: You may cancel your subscription at any time. Your subscription ends at the end of the current paid billing period.

Upon termination:

• Your access to the platform and content ends on the termination date.
• Completion certificates issued before termination remain valid as documentary proof, but online verification is no longer available after data deletion.
• We will retain your data in accordance with our Privacy Policy.
• Provisions regarding intellectual property, limitation of liability, and governing law survive termination.

10. Force Majeure

Neither party shall be liable for delays or failures in performance caused by events beyond its reasonable control, including natural disasters, war, pandemic, government action, or major infrastructure failures. The affected party must notify the other party promptly and take reasonable steps to resume performance. If a force majeure event continues for more than 60 days, either party may terminate the subscription without penalty.

11. Governing Law

These Terms are governed by and construed in accordance with the laws of Finland, without regard to its conflict of law provisions. Any disputes arising from these Terms or the service shall be subject to the exclusive jurisdiction of the courts of Finland.

12. Changes to Terms

We may update these Terms from time to time. For non-material changes (corrections, clarifications), the updated Terms take effect upon posting with a new effective date.

For material changes — including changes to fees, payment terms, liability, termination rights, or data processing — we will notify you by email at least 30 days before the new Terms take effect. If you do not agree with a material change, you may terminate your subscription without penalty by providing written notice before the effective date.

Your continued use of our services after the effective date of any change constitutes acceptance of the updated Terms.

13. Contact

Questions about these Terms? Contact us at support@yutori.fi.