This page gives a practical overview of how Rakenne handles personal data when you use the platform. It is a companion to our formal Privacy Policy and Data Processing Agreement , which contain the full legal details.
Roles & Responsibilities
When you use Rakenne:
- You (the customer) are typically the controller of personal data in your tenants and workspaces.
- Rakenne is a processor when we handle that data on your behalf to operate the service.
You decide:
- Which users have access,
- What documents and data you upload, and
- How long you keep data in the platform.
We operate the infrastructure and process personal data only:
- To provide, support, and secure the service, and
- To comply with our own legal obligations.
For more detail on roles and responsibilities, see our Data Processing Agreement .
What Data We Process
Depending on how you use Rakenne, we may process:
- Account and user data
- Names, email addresses, login identifiers, and workspace memberships.
- Content data
- Documents, workflows, prompts, comments, and chat transcripts you or your users create or upload.
- Usage and technical data
- Activity logs, timestamps, IP addresses, device and browser information, and feature usage metrics that may qualify as personal data.
- Billing data
- Limited billing details handled mainly by our payment provider (Stripe), such as subscription status and invoice information.
You remain responsible for ensuring that any personal data you load into Rakenne is lawful for you to process.
AI Processing & Model Training
Rakenne uses Google Gemini as the default large language model (LLM) to power document drafting and workflow assistance. When we call the Gemini API with our keys:
- We send only the minimum context needed to complete the current task (for example, specific clauses from a document, workflow metadata, and your instructions).
- Under Google’s enterprise AI terms, your data is not used to train base models.
- Google may retain limited logs for a short period for abuse detection and service reliability.
Rakenne also supports Bring Your Own Key (BYOK) for Anthropic (Claude), OpenAI, and Google:
- When you supply your own API key, that provider acts under your agreement and may process data according to your configuration and policies.
- In that path, the LLM provider is your processor or subprocessor, not ours.
We do not train our own general-purpose language models on your documents or prompts, and we do not sell or rent your data.
Data Location & International Transfers
- The Rakenne platform is currently hosted on reputable cloud infrastructure (for example, Google Cloud) in regions such as the United States, with additional regions introduced as necessary.
- Personal data may be stored or processed in the US and other jurisdictions where our subprocessors operate.
- When laws like the GDPR treat these flows as international transfers, we rely on appropriate safeguards (such as Standard Contractual Clauses) and supplementary technical and organizational measures.
More details about individual vendors, their locations, and roles are available on our Subprocessors & Data Processing Overview .
Data Retention & Deletion
You control how long most personal data remains in Rakenne:
- You can create, update, and delete tenants, projects, and workspaces.
- You can remove documents and other content that is no longer needed.
- You can export data from the platform for your own records or migration.
When you close your account or ask us to delete personal data:
- We delete personal data from active systems within a commercially reasonable period, subject to legal retention requirements.
- Backups are removed through our standard backup rotation over time.
- We may retain data that has been irreversibly anonymized or aggregated such that it is no longer personal data.
These behaviours are described in more detail in our Data Processing Agreement .
Your Data Subject Rights
As controller, you remain the primary point of contact for data subjects and regulators. We support you by:
- Providing tools and APIs that allow you to locate, export, correct, or delete data in the platform, where technically feasible.
- Assisting with responses to data subject requests that relate to processing we perform on your behalf.
- Notifying you without undue delay if we become aware of a personal data breach affecting your data, and cooperating with your assessment.
If you are an end user and have questions about how your employer or organization uses Rakenne, please contact them directly. If you contact us, we may forward your request to the relevant customer where appropriate.
Learn More
For detailed legal terms and additional information, see:
If you have questions about privacy or data protection at Rakenne, contact us at privacy@rakenne.app .