Privacy policy

Controller

CSC – IT Center for Science Ltd. is the controller of the personal data processed in the Ahjo service.

Data protection officer: privacy@csc.fi

What is processed and why

Signing in

Signing in uses CSC's user authentication service. We receive and store the identity it releases: a persistent user identifier, your name, your e-mail address, your CSC username and your home organisation. These identify you in the customer portal and connect you to the accounts you administer or hold an allocation in.

Using the API

For every API request we record who made it (the API key and its account), which model was used, when, how many tokens were processed and how the request ended. These usage records are the basis of quota enforcement, capacity management and invoicing.

The content of requests and responses, such as prompts, uploaded images and generated text, is processed in memory to produce the response and is not stored. No request content is used to train or tune models.

Technical logs

The service keeps technical logs (connection metadata, errors) for operating and securing it. They do not contain request content.

Legal basis

The processing is necessary for providing the service you or your organisation has agreed to use, and for CSC's legitimate interest in operating and securing it.

Retention

Login identities are kept while your access lasts and removed within 24 months when it is revoked. Usage records are kept for as long as invoicing and reporting require, but not for more than 24 months. Request content is not retained.

Recipients

The data is processed on CSC's own infrastructure in Finland and is not transferred outside CSC. Aggregated usage is reported to the account's administrators and to the organisation paying for it.

Your rights

You have the right to access the personal data concerning you, to have inaccurate data corrected, and to object to or restrict processing where the law provides for it. Requests go to the contact address above. You may also lodge a complaint with the Office of the Data Protection Ombudsman.

Contact

Questions about this policy or the processing of your data: servicedesk@csc.fi

Questions on data protection, and requests concerning your rights, also reach CSC's data protection officer: privacy@csc.fi