This summary explains what Maja collects, why, and how long it is kept. The full policy is available in the app. Maja App Oy (Business ID 3633958-3, Finland) is the data controller and can be reached at hello@maja-app.com.
Bank access is based on your explicit consent under PSD2 and can be withdrawn at any time. Providing the service to you is based on performance of contract. Tax reporting to the Finnish Tax Administration is based on a legal obligation of the landlord that Maja fulfils on their behalf.
Sensitive fields, including personal identity codes used for tax reporting, are encrypted with AES-256 before storage. Access to production data is restricted and logged. Bank consents are read-only: Maja cannot initiate payments or change anything in your account, and your banking credentials are entered only in your own bank's environment and never reach Maja.
A rental owner sees only what you choose to share — your first name and last initial, reliability label, verified and on-time payment counts and an approximate rent range. Maja does not sell personal data or use it for advertising. Processors used for hosting, payments, email delivery and open banking access are bound by data processing agreements and operate within the EU/EEA where possible.
Account and payment history data is deleted when you delete your account, except records that accounting and tax law require us to keep for up to six years. You have the right to access, correct, export and erase your data, to withdraw bank consent, and to complain to the Finnish Data Protection Ombudsman.
Company: Maja App Oy, Business ID 3633958-3, Finland. Questions? Email hello@maja-app.com