Privacy Policy

1. Who we are and what this policy covers

Aktio is a profitability analytics service for e-commerce and other companies, developed and operated by Genero Oy Ab (“Genero”, “we”), a Finnish company with Business ID 2387598-5 and its registered office at Risto Rytin tie 33, 00570 Helsinki, Finland.

Genero acts in two different roles, and which one applies depends on whose data is concerned:

• Controller for the personal data of visitors to aktio.io, of people who request a demo or contact us, and of the people who hold an Aktio user account. This policy describes that processing.
• Processor for the data our customers bring into Aktio from their own systems: orders, advertising accounts, analytics, CRM and ERP data. Our customer is the controller of that data and decides what is collected and why. We process it on the customer’s documented instructions, under the customer agreement and a data processing agreement. Section 5 describes what this involves.

If you are a customer or a lead of a company that uses Aktio, that company’s own privacy notice applies to your data. Please contact that company directly; we help our customers answer such requests.

Genero’s agency-wide privacy policy, which covers Genero’s other services, its employees and job applicants, is at generogrowth.com/privacy-policy.

2. Visitors to aktio.io

Cookies and consent

aktio.io uses cookies and similar technologies in four categories: necessary, preferences, statistics and marketing. Necessary cookies are always on; the other three run only after you have accepted them in the cookie banner. Your choice is stored in a first-party cookie (gds-consent) for one year, and you can change it at any time from “Cookie settings” in the footer.

Statistics and marketing tags are loaded through Google Tag Manager, with Google Consent Mode set to deny analytics and advertising storage until you accept the corresponding category.

Hosting

The website is served by Firebase Hosting, a Google Cloud service. To deliver the pages, the hosting provider processes the technical data of each request, such as your IP address, the page requested and your browser type. We do not use this data to identify visitors.

Where your visit came from

If you arrive from a campaign link, the campaign parameters (UTM) and advertising click identifiers in the address, together with the referring site, are kept in your browser’s session storage for the length of the browser session. They are not sent to us unless you submit the demo form, where they tell us which campaign led to the request.

3. Demo requests and contact

When you book a demo on aktio.io, we process the details you enter: your name, work email address and company, and optionally your phone number and a message. With them we receive the page you sent the form from, the language you used, the campaign parameters described above, and your consent choices.

We use this information to respond to your request, arrange the demo and discuss how Aktio could serve your company. We contact you about Aktio products, news and events only if you asked us to by ticking the box; you can withdraw that consent at any time by replying to a message or by writing to us.

The request is passed to Genero’s own sales system, where it is handled as described in Genero’s privacy policy. The legal basis is steps taken at your request before entering into a contract and our legitimate interest in responding to business enquiries (GDPR Article 6(1)(b) and (f)); marketing messages are based on your consent (Article 6(1)(a)).

When you email or call us, we process your contact details and the content of the conversation in order to handle the matter.

We keep demo requests and correspondence for as long as the sales dialogue and any resulting customer relationship require, after which they are deleted or anonymised unless a legal obligation requires us to keep them longer.

4. Aktio user accounts

To use Aktio you sign in with a Google account or with an email address and password. We process:

• Your email address, display name and profile picture, received from your sign-in provider or entered when the account is created, to authenticate you and to control which company accounts and dashboards you may open.
• Your saved view preferences, such as date ranges, markets, comparisons and colour theme, so the app looks the same next time.
• The authorisations you grant to third-party platforms (section 6) and to AI assistants (section 7).
• Access logs: which user called which part of the service and when, recorded under your email address so that access to customer data can be accounted for (GDPR Article 32). The data you view is not logged, and the logs are redacted centrally so that tokens, contact details and similar values do not reach them.

The legal basis is the performance of the agreement between Genero and your company, and our legitimate interest in keeping the service secure and in being able to show who accessed what (GDPR Article 6(1)(b) and (f)).

Account data is kept for as long as the account exists and the customer agreement is in force. When a user is removed from a company account, or the agreement ends, the account data is deleted within a reasonable time unless a legal obligation requires longer retention. Access logs are kept for a limited period for security purposes.

5. Customer data processed on our customers’ behalf

Our customers connect their own systems to Aktio: online stores (such as WooCommerce), advertising accounts (Meta, Google Ads, TikTok, LinkedIn Ads, Microsoft Ads), analytics (Google Analytics 4, Google Search Console), CRM and form tools (HubSpot, Gravity Forms), ERP and project systems (Severa, Easoft) and BigQuery datasets. Most of this is business and performance data, but some of it can contain personal data about the customer’s own customers and leads, for example order data, CRM contacts and form submissions.

Aktio is built to keep as little as possible about such people:

• Email addresses and phone numbers are not stored in the data warehouse. They are converted to pseudonymous SHA-256 hashes and exist in plain text only in memory, for as long as that takes. Contact names are not written to the warehouse at all.
• The warehouse holds the hashed identifiers, business identifiers such as company name and VAT number, online identifiers such as advertising click IDs and analytics client IDs, campaign parameters, CRM lifecycle stages and order values. A hash is still personal data under the GDPR, and these records are within the scope of access and erasure requests.
• Form submissions forwarded from the customer’s Gravity Forms are held as submitted in a delivery buffer for up to seven days, until they have been forwarded and the retry window has passed.
• Server-side tracking and audience features forward hashed identifiers and conversion events to Meta, Google, TikTok or LinkedIn only where the customer has configured it and the record carries the consent the customer has designated. The customer is responsible for the lawful basis of these transfers and for informing its own customers.
• Google Search Console search queries and SEO keyword data can contain text typed by the public; they are kept for a maximum of 760 days.

We process this data only to provide the service the customer has ordered and on the customer’s instructions. Customers can export their data at any time and can ask us to delete it when the agreement ends.

If you are a customer or a lead of one of our customers and want to exercise your rights, please contact that company. We support our customers in responding, and we have the tools to find and erase the records tied to a given email address or phone number.

6. Connections to Meta, Google and other platforms

Aktio reads data from advertising and analytics platforms through the platforms’ own authorisation (OAuth). A user who may administer a customer account signs in to the platform, chooses which ad accounts or properties to connect, and the platform issues Aktio an access token.

What Aktio reads and writes

• Meta (Facebook Login for Business, Marketing API): the businesses, ad accounts and pages you can access, so you can choose which to connect; the campaign, ad set and ad structure with its status and daily spend and performance figures; ad creatives for previews; and conversion actions. Where the customer uses the product feed or audience features, Aktio also writes product data to the connected catalog and uploads hashed customer lists to custom audiences, and where server-side tracking is configured it sends conversion events through the Conversions API. The permissions requested are ads_read, ads_management, business_management, pages_show_list and pages_read_engagement.
• Google (Google Ads, Google Analytics 4, Google Search Console): the accounts and properties you can access; campaign structure, spend and conversions; analytics reports; and search queries, clicks and impressions by page. Where the customer uses server-side tracking or audience features, Aktio also uploads conversions and hashed customer lists to Google Ads.
• TikTok and LinkedIn Ads: campaign structure, spend and performance figures, and conversion events where server-side tracking is configured for them. Microsoft Ads: campaign structure, spend and performance figures.

How tokens are stored

Access tokens are stored server-side in Google Cloud Secret Manager and are never sent to your browser. Only Aktio’s own servers use them, to read the data above on a schedule and when you ask for it. Aktio also stores the platform’s identifier for your user (for Meta, the app-scoped user ID) so that it can honour a request to remove the app.

Disconnecting

You can disconnect a platform at any time on the Integrations page of your Aktio account. The stored token is deleted when no other connection uses it, and you can choose to delete the data imported through that connection as well. You can also remove Aktio in the platform’s own settings; for Facebook, under Settings & privacy → Settings → Apps and Websites. When Meta tells us that you have removed the app or asked for your data to be deleted, Aktio deletes the stored token and the connections tied to your Facebook user. The data deletion page has the details for each platform.

7. AI assistants

A customer can let its users connect an AI assistant of their own choosing, such as Claude, to the customer’s Aktio data through the Model Context Protocol (MCP). This is off by default and can be switched on only by the customer’s own administrators. Each user then connects their own assistant and approves a consent screen that names it.

Over this connection Aktio returns reported metrics and KPI definitions for the accounts the user can already see. It does not return lead records, hashed identifiers, contact names or the email addresses on an account’s access lists. The assistant’s provider is chosen by the customer and its users and acts under its own terms; it is not a Genero sub-processor.

Each assistant call is logged (tool, user, client, account and date range), and a technical usage record holding the same identifiers, but none of the data, is kept for 90 days. Users can revoke an assistant at any time in their Aktio settings.

8. Where data is stored and who else processes it

Aktio runs on Google Cloud. Application data (accounts, configuration and the BigQuery data warehouse) is stored in Google’s EU regions, and the service’s servers run in the EU. Integration credentials are stored in Google Cloud Secret Manager, which replicates them across Google’s regions.

Where a recipient processes personal data outside the European Economic Area, the transfer is based on an adequacy decision of the European Commission or on the standard contractual clauses adopted by the Commission, together with any supplementary measures the transfer requires.

9. Security

Access to each customer account is limited to the users listed on it, and the limit is enforced both in the database rules and on the server. Platform tokens are kept in a secrets store and never reach the browser; AI-assistant tokens are stored as hashes. Email addresses and phone numbers from customer systems are pseudonymised before storage, and logs are redacted centrally so that secrets and contact details do not reach them. All traffic to and from the service is encrypted in transit.

10. How long we keep data

We keep personal data no longer than its purpose requires or the law demands. In summary:

• Demo requests and correspondence: for the sales dialogue and any customer relationship that follows (section 3).
• Account data: for as long as the account exists and the customer agreement is in force (section 4).
• Data processed on a customer’s behalf: according to the customer’s instructions and the customer agreement; deleted when the agreement ends and the customer asks for it.
• Form submissions in the delivery buffer: 7 days.
• Google Search Console queries and SEO keyword data: 760 days.
• AI assistant usage records: 90 days.
• Your cookie consent choice: 1 year.
• Hosting and access logs: for a limited period, for security and accountability.

11. Your rights

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, to receive the data you have provided in a portable format, and to withdraw a consent at any time without affecting the lawfulness of the processing before the withdrawal. You also have the right to object to direct marketing at any time.

To exercise these rights, write to tietosuojavastaava@genero.fi. We may need to verify your identity before acting on a request. We respond within the time limits set by the GDPR, normally within one month.

If you believe that we process your personal data unlawfully, you may lodge a complaint with a supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (tietosuoja.fi); you may also contact the authority of the EU country where you live or work.

For data that Aktio processes on behalf of a customer, please direct your request to that customer, who is the controller.

12. Changes to this policy

We update this policy when the service or the law changes. The current version is always at aktio.io/privacy/, with the date of the last update at the top. Changes that materially affect how your data is used are announced to account holders in the service or by email.

13. Contact

Genero Oy Ab, Business ID 2387598-5, Risto Rytin tie 33, 00570 Helsinki, Finland.

Privacy matters: tietosuojavastaava@genero.fi. Aktio in general: aktio@genero.fi.