Privacy
What we do with your information.
Ateliva is pre-launch, and this policy covers the website only. It is short because the website does very little.
In one line. We store the email address you give us for early access, use it only to write to you about early access, and let you remove it with one click. No cookies, no analytics.
Who we are
Ateliva is a product of Swepth Oy, a company registered in Finland with Business ID 3619574-3. Swepth Oy decides why and how the personal data described here is processed, which makes it the controller under the General Data Protection Regulation.
You can reach us at hello@ateliva.com.
What this policy covers
This policy covers the Ateliva website at ateliva.com, in English and in Finnish. Ateliva itself has not launched, so there are no product accounts and no customer data to describe yet. When Ateliva launches we will publish a separate policy for the product.
The short version
We store one thing: the email address you give us for early access. We use it to write to you about early access and for nothing else. The website sets no cookies, keeps nothing in your browser and runs no analytics. You can remove yourself with one click from the bottom of any email we send.
Early access
When you submit the early access form, your address is sent to our server, stored in our database and confirmed by email. Nothing is stored in your browser.
What we hold
- the email address you entered
- the language of the page you used, English or Finnish
- which part of the site the signup came from
- the date you signed up, and whether you are still subscribed
- a random identifier that makes your unsubscribe link work
We do not ask for your name, your company, your role or anything else, because we do not need it.
Why we process it
To send you the confirmation you asked for, and to write to you when early access opens.
Legal basis
Your consent, under Article 6(1)(a) of the GDPR, given when you submit the form. You can withdraw it at any time, and withdrawal does not affect anything we did before you withdrew it.
How to withdraw
Every email we send carries an unsubscribe link that works in one click. You can also write to hello@ateliva.com and ask us to remove you.
How long we keep it
Until we have finished contacting people about early access, or until you ask us to delete it, whichever comes first. If you unsubscribe we keep your address on a suppression list rather than deleting it, so that it is not added again by mistake. Ask us to delete it outright and we will.
Confirmation and later email
Signing up triggers one confirmation email. Later we may write once or twice more, when early access opens. We do not send a newsletter, we do not sell your address, and we do not pass it to anyone for their own marketing.
Our email contains no tracking pixels, no remote images and no web fonts, so we do not know whether you opened it.
Abuse protection
The signup endpoint is open to the internet, so it needs protecting. Without a limit it could be used to send Ateliva branded email to people who never asked for it.
When you submit the form we take your IP address, combine it with a secret value and hash it, then count how many signups that hash has made in the last hour. The IP address itself is never written down, and the hash cannot be turned back into it. These counters are deleted after a day.
Legal basis: our legitimate interest under Article 6(1)(f) of the GDPR in keeping our own systems from being abused.
Server logs
The website is served by a hosting provider acting as our processor. Like any web server, it records technical information each time a page is requested, normally the IP address, the time, the page requested and the browser user agent string.
Legal basis: our legitimate interest under Article 6(1)(f) in running and securing the website. We do not extract these logs, analyse them or use them to identify visitors, and they are kept only for as long as the provider retains them.
Who else can see your data
Three providers are involved. Each processes data on our behalf under a data processing agreement, not for its own purposes.
- Supabase, which hosts the database holding the early access list and runs the code that receives the form
- Resend, which delivers the confirmation email
- our website hosting provider, which serves the pages and holds the server logs
We do not sell personal data and we do not share it for advertising. We use no analytics service, no customer relationship system and no marketing automation tool.
Transfers outside the EU and EEA
Swepth Oy is based in Finland, and the early access database is hosted in the European Union.
Resend Inc., which delivers our email, is based in the United States, so sending you a confirmation involves a transfer outside the EEA. That transfer is covered by the European Commission's standard contractual clauses. Where any other provider processes data outside the EEA the same applies, or the country holds an adequacy decision from the Commission.
Your rights
Under the GDPR you can ask us to do any of the following:
- give you a copy of the personal data we hold about you
- correct it if it is wrong or incomplete
- delete it
- restrict how we use it
- object to processing we base on our legitimate interest
- send it to you, or to someone else, in a portable format
- withdraw consent you have given, at any time
Write to hello@ateliva.com and we will respond within one month. Exercising these rights is free.
If you think we have handled your data badly you can complain to the Finnish Data Protection Ombudsman at tietosuoja.fi, or to the supervisory authority in the country where you live.
Security
The website is served over HTTPS, and the signup travels over HTTPS to our server. The database cannot be reached from a browser: the keys that read it exist only on the server, and the database refuses every request that does not carry them. Access to the list is limited to the people who need it.
Children
This website is aimed at businesses and the people who work in them. It is not directed at children, and we do not knowingly collect data about them.
Changes to this policy
If we change how the website handles personal data, for example by adding analytics, we will update this page and change the date on it before the change goes live. This policy was rewritten when the early access form moved from opening your own email application to storing your address with us.
Last updated 3 September 2026
Ateliva is operated by Swepth Oy, Business ID 3619574-3, Finland. Questions about this page go to hello@ateliva.com.