Privacy Policy — Karhuno AI

Public Website Version

Controller: Daring Spirit Oy

Business ID: 3461256-6

Privacy contact: team@karhuno.com

Last updated: 5 April 2026

1. Controller

Daring Spirit Oy is the controller of personal data described in this Privacy Policy.

  • Business name: Daring Spirit Oy
  • Business ID: 3461256-6
  • Address: Hiihtomäentie 14C50, Finland
  • Privacy contact: team@karhuno.com

2. Scope

This Privacy Policy applies to personal data processed through the Karhuno website, Karhuno user accounts, customer support, billing, our own B2B marketing activities, and professional contact intelligence outputs made available to customers.

Karhuno provides business intelligence and contact discovery services. Because of this, we process personal data in several different contexts, including website usage, customer account administration, and the sourcing of professional contact information from public or commercially available sources.

3. Categories of Data Subjects

  • website visitors
  • account users and customer representatives
  • billing contacts
  • support contacts
  • recipients of our own business marketing communications
  • professional contacts included in Karhuno service outputs

4. Personal Data We Process

4.1 Website and product usage data

  • IP address and approximate geolocation derived from IP where technically generated
  • browser, device, and session information
  • authentication cookies and session cookies
  • security and service logs
  • analytics and website usage events
  • cookie consent preferences

4.2 Account and customer data

  • name
  • work email address
  • password hash
  • subscription, billing, and invoice details
  • support chats and related communications
  • product usage events and account activity

4.3 Professional contact intelligence data

  • name
  • role or job title
  • company name
  • work email address
  • work phone number
  • LinkedIn URL and publicly available LinkedIn profile data
  • Facebook URL and publicly available Facebook profile data
  • public posts and comments
  • company news references and signal context
  • location and seniority

Karhuno is designed to focus on professional context data. Karhuno does not intentionally seek special categories of personal data and does not rely on such data as a product feature.

5. Sources of Personal Data

Karhuno may collect personal data directly from the data subject, from the Karhuno website and service, and from public or commercially available sources. These sources may include:

  • public company websites
  • public professional profiles and social profiles
  • public news, press releases, and media sources
  • public posts and comments on platforms such as LinkedIn, Reddit, X, and Facebook where lawfully accessible
  • phone and email enrichment providers
  • service providers supporting hosting, authentication, analytics, communications, billing, and customer support

6. Purposes of Processing and Legal Bases

Karhuno processes personal data only for defined business purposes and under an applicable legal basis under the GDPR.

7. Professional Contact Intelligence and Disclosure to Customers

Karhuno may collect, organize, enrich, and disclose professional contact data to customers as part of the service output. This processing is limited to business-relevant professional data and associated public business context.

Where professional contact data is disclosed to a customer as part of a Karhuno output, the customer will normally act as an independent controller for its own subsequent use of that data.

Karhuno does not currently offer a feature for customers to upload their own contact databases for processing inside the platform.

8. Cookies and Similar Technologies

Karhuno uses cookies and similar technologies for essential website functionality, authentication, analytics, and measuring business marketing performance.

  • essential session cookies
  • authentication cookies
  • Google Analytics 4
  • LinkedIn Insight Tag
  • cookie preference records

Where required by law, non-essential cookies and similar technologies are used on the basis of consent. Essential cookies needed to provide the website or maintain security may be used without consent where permitted by law.

9. Recipients of Personal Data

Depending on the processing context, personal data may be disclosed to the following categories of recipients:

  • hosting and infrastructure providers
  • authentication providers
  • analytics and cookie technology providers
  • payment and invoicing providers
  • communications and support providers
  • LLM and AI service providers
  • email and phone enrichment providers
  • professional advisers and authorities where required by law
  • Karhuno customers receiving professional contact intelligence outputs

10. International Transfers

Karhuno is based in Finland and aims to use infrastructure located in Finland or the European Economic Area where possible. However, some customers, service providers, enrichment providers, and AI providers may be located outside the EEA.

Where personal data is transferred outside the EEA, Karhuno will rely on an applicable lawful transfer mechanism, such as an adequacy decision, standard contractual clauses, or another lawful mechanism available under the GDPR.

11. Data Retention

Karhuno retains personal data only for as long as reasonably necessary for the purpose for which it was collected, unless a longer retention period is required by law or needed for the establishment, exercise, or defence of legal claims.

12. Data Subject Rights

Subject to the GDPR and applicable law, a data subject may have the right to request access, rectification, erasure, restriction of processing, objection to processing based on legitimate interests, objection to direct marketing, and data portability where applicable.

Requests can be submitted by email to team@karhuno.com. Karhuno aims to respond without undue delay and normally within one month of receipt.

Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

13. Identity Verification for Rights Requests

Karhuno may take reasonable and proportionate steps to verify the identity of a person making a rights request before disclosing or deleting personal data.

For many requests, an email sent from the same work email address associated with the record may be treated as sufficient verification.

If there are reasonable doubts about identity, Karhuno may request additional information necessary to confirm that the requester controls the relevant work email address or professional profile.

Karhuno does not routinely request government identification unless strictly necessary.

14. Objection to Direct Marketing

A person may object at any time to the processing of personal data for direct marketing purposes. Once an objection is received, Karhuno will stop using that personal data for direct marketing and may retain limited suppression data only to ensure that the objection is respected in the future.

Marketing opt-out requests should be sent to team@karhuno.com with the subject line 'Opt-out'.

15. Complaints

If a person believes that Karhuno's processing of personal data violates applicable law, that person has the right to lodge a complaint with a competent supervisory authority. In Finland, the competent supervisory authority is the Office of the Data Protection Ombudsman.

16. Changes to this Privacy Policy

Karhuno may update this Privacy Policy from time to time. The latest version will be made available on the website and indicated by the 'Last updated' date.

Appendix: Short Notice for Professional Contacts

Karhuno processes limited professional contact data to provide a B2B contact intelligence service. This may include name, role, company, work email, work phone, professional profile URLs, public profile data, public posts and comments, public company news references, and business signal context. Sources may include public company websites, public professional profiles, public news and media, public social posts, and commercial contact enrichment providers. The legal basis is legitimate interests. Professional contact data may be disclosed to Karhuno customers as part of the service output. Rights requests and objections can be sent to team@karhuno.com.