Privacy
Privacy notice
Updated 2 October 2026.
Controller
Turpeinen Tomi Antero / Kanavana (sole trader)
Business ID 1788559-7
Laakavuorentie 2 M 145, 00970 Helsinki, Finland
shop@kanavana.fi
Two roles
Kanavana is the controller for a customer's own account: email address, orders and sign-in. When a candidate answers an interview, the recruiting employer is the controller and Kanavana processes the data on their behalf. A candidate's rights are therefore directed at the employer in the first instance, and we pass requests on to them.
What is processed
About a customer: email address, the times of confirmation and consent, the IP address a registration was requested from, the interviews they build, their orders and their payments, and the campaign code if they arrived from a campaign link.
About a candidate: the answers given in the interview, the report produced from them, and the reference identifying the invitation. We do not ask for a name, contact details or a national identity number.
From the contact form: name, email address, subject and message. They are sent through Brevo as an email to shop@kanavana.fi so that we can reply, and are not stored in the service's database. The message stays in our email for as long as handling the matter requires. The sender's IP address is held in the server's memory for at most an hour to limit misuse.
Retention
Interview answers are not stored in Kanavana's database at all. They live in the interview engine's memory (Valkey, Helsinki) for at most 24 hours. The database keeps only a turn's number, its state and a digest of the answer, which is what recognises a resent answer as the same one — not the text of it.
A finished report waits for delivery for at most 24 hours and is deleted as soon as the email provider accepts it. After that the report exists only in the employer's mailbox.
A report from a customer's own trial interview is kept for 90 days and then deleted automatically.
Invitation links and their references last for the validity of the order, which is stated at purchase.
Account details last as long as the account. The IP address a registration was requested from is removed after 30 days; it is used only to limit repeated registration attempts.
Order and payment records are kept for the period required by accounting law.
Automated privacy filtering
Direct personal data is removed from answers automatically before the report is produced. The filter does not catch everything, and its accuracy varies by language. Do not write unnecessary or sensitive personal data into your answers.
Automated decision-making
The service makes no automated decisions about a candidate. An interview produces a report, which is decision support; the choices are the employer's.
Processors
We use the following providers:
- UpCloud — server capacity and database, Helsinki.
- Google Cloud and Vertex AI — the interview engine, interview building, privacy filtering and the virtual respondents in a customer's own test interview, in the EU region.
- Brevo — email delivery, including contact form messages, EU.
- Stripe — card payments from 1 October 2026. Stripe may transfer data outside the EU under its own safeguards. Kanavana does not receive or store card details.
Cookies
We use no tracking or advertising cookies, and the site carries no third-party scripts. There are four cookies, and each one is a sign-in credential the service cannot work without: the customer session and the customer-area sign-in (7 days), a candidate's access to their own interview (the invitation's validity, at most 7 days), and the internal cost view (8 hours). All are HttpOnly, Secure and SameSite=Lax. No consent is asked for, because none is needed.
We count how many times pages are opened and campaign links are used, per day. We use no cookies for this and store no IP address or other information about the visitor.
Server logs record the time of a request, the page opened and a shortened IP address (last part removed), for security and troubleshooting. The logs are deleted within 14 days.
Your rights
You have the right to know what data is processed about you, to have inaccurate data corrected, to request erasure and restriction, and to lodge a complaint with the Finnish Data Protection Ombudsman. Requests to shop@kanavana.fi. If you answered an interview, address the request to the recruiting employer first — we will pass it on where needed.