Privacy notice
Last updated: 14 August 2026
Controller
Oivanto Oy is the controller for BMGR.fi, Oivanto Accounting and Oivanto Business Manager. You can contact the controller using the contact form on this site.
Data we process
We process account and role details, organisation and subscription administration details, and the content an organisation chooses to store in enabled BMGR modules. This can include customer, project, risk, invoice, accounting and document data. We also process necessary session, login-security and technical service data, as well as support requests you send us.
Why we process data
We use the data to provide and secure BMGR, administer accounts and organisations, provide support, meet legal obligations and prevent misuse. The legal basis is normally the contract, a legal obligation or Oivanto's legitimate interest in service security and support.
Retention
We keep account and service data for as long as the service relationship and necessary follow-up require. When an account deletion request is handled, we remove the user account and personal data that are no longer needed. Accounting, tax and other statutory records are retained for the period required by applicable law.
Security
BMGR uses access controls, tenant isolation, encryption for protected fields, authenticated sessions, backup procedures and technical safeguards. Access is limited to people and systems that need it for the service.
Service providers
BMGR uses a Finnish server environment for the application and data storage. It uses Brevo for transactional and inbound service email, and Cloudflare for DNS and public network protection. Optional official integrations process data only when an organisation enables and authorises them.
Your rights
You may request access to, correction, restriction, deletion or portability of your personal data, and object to processing where applicable. You may also lodge a complaint with the competent data protection authority. Use the contact form to make a request.
No advertising or in-app purchases
BMGR does not include advertising, advertising profiling or in-app purchases.
Push notifications
Firebase and Firebase Cloud Messaging are not in production use. Before any Firebase/FCM release, this notice and the Google Play Data Safety disclosure will be updated for the exact SDK and server implementation.
Contact and deletion requests
Use the public forms below to contact Oivanto or request deletion of an account. We do not disclose account existence in the receipt sent for a deletion request.