You're handing us your whole business. Here's how we treat it.

In transit

Files go from your browser straight into encrypted storage over a private, one-time upload link — encrypted the whole way, never routed through our machines or a third-party inbox, never sitting on the public web. Large backups upload in chunks; nothing changes about the handling.

At rest

Your backup and code sit in encrypted storage, accessible only to the people doing your quote and your upgrade. Nobody else — no offshore subcontractors, no "extended team."

What we use it for

Two things: preparing your quote, and performing your upgrade. That's the whole list. Your data isn't mined, benchmarked, shared, or used to train anything.

When it's deleted

After delivery, once you've gone live and confirmed you have your own copies of everything, we remove your files from our systems. We don't keep a copy of your database around "just in case."

Where it's processed

In the European Union. We're a Finnish company, and your data is handled under EU privacy law (GDPR) — the strictest general privacy regime in the world. That's not paperwork we do for European customers only: wherever you are, US included, you get the same standard by default. If your compliance people want it formalized, a data processing agreement (DPA) is available on request.

What we never ask for

Live passwords, or access to your production server. We work from a backup — your running system stays untouched, and only you decide when the upgraded version goes live.