Skip to content
Join the waitlist

Privacy

How Metafora handles personal data during its pilot.

Version 2 · Effective 16 October 2026

  1. Who we are

    Metafora Intelligence Oy (Business ID 3620385-4, VAT number FI36203854), a limited liability company in the Finnish Trade Register, domiciled in Helsinki, Finland, runs Metafora and is the controller of the personal data described here. You can reach us at joonatan@metafora.chat. Metafora gathers what people think about a question and writes it down.

    When someone uses Metafora to ask people on behalf of their firm or a client, they decide what is asked, and that firm or client may be the controller of the answers, with us processing them on its behalf.

  2. What we collect

    If you create Metaforas: your name, your email address and sign-in, what you type and attach, and the Metaforas you make.

    If you are asked: your name and your email address, which you confirm with a code when you send; your interview while it runs; and the answer you approve. The interview’s transcript is deleted when your answer is composed, and an interview nobody finishes is deleted after 30 days.

    If you join the waitlist: your email address and what you tell us.

    If you dictate or answer by voice: your voice goes to OpenAI as you speak and is turned into text there; it is not recorded.

    From everyone: brief technical data, such as IP addresses for rate limits and server logs. We set no analytics or advertising cookies, only the ones that keep you signed in and hold your place in an interview. The public site counts visits without cookies and without recording who you are.

  3. Why, and on what basis

    To provide Metafora: our contract with you, or, for the people asked, our legitimate interest in carrying out the interview they chose to take. To keep it secure and prevent abuse: legitimate interest. To answer the waitlist and run the pilot: your request and our legitimate interest; any non-essential mail has a one-click stop. To bill for plans: our legal obligation.

  4. Who processes it for us

    Vercel (hosting) and Supabase (database), both in Stockholm; OpenAI (the AI models); Resend (email); Stripe (payments); Upstash (rate limits); and Google, if you sign in with Google.

    We call OpenAI with storage turned off, and its live voice service keeps no recording. OpenAI states that API data is not used to train its models and may be kept for up to 30 days to monitor abuse. We do not use your data to train models.

    Where one of them handles data outside the EU or EEA, the transfer rests on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

  5. How long

    Accounts, until you delete them. An approved answer is kept as the record of what was said: it stays if the Metafora is deleted, and if you delete your account it is unlinked from you rather than deleted; email us to have it erased. Waitlist entries, until you ask us to remove them. Billing records, as long as accounting law requires. Logs, for a short period.

  6. Your rights

    You can ask to access, correct or erase your data, to restrict or object to how we use it, and to receive it in a portable form. Delete your account from your account settings, or email joonatan@metafora.chat. You can also complain to the Data Protection Ombudsman at tietosuoja.fi.