Your data. Your home.
We believe that the data generated by your home belongs to you—not to advertisers, insurance companies, or us.
No Ads.
We do not sell your data. Our business model is simple: property managers pay us for software.
Encrypted.
Access logs and personal data are encrypted at rest. Only you and your property manager can see them.
Europe First.
All data is hosted in Finland and Germany. We are fully GDPR compliant by design.
Definitions
Your Housing Company
Your housing company (Asunto-osakeyhtiö) owns the register of occupants. They decide why data is collected.
Kotoluoto Oy (Us)
We process data on behalf of your housing company to provide the Koto service (keys, messaging, payments).
Data We Collect
- Identity DataName, apartment number, email, and phone number (for keys).
- Financial DataPayment history for saunas/parking. We do not store credit card numbers (Stripe does).
- Device DataIP address and device model to ensure secure mobile key delivery.
Sub-processors
We use a limited number of trusted third-party providers to power our infrastructure.
Security Measures
We use banking-grade encryption (AES-256) for all sensitive data. Access to production databases is restricted to key personnel via hardware keys (YubiKey). We conduct annual third-party security audits.