Privacy Policy

1. Introduction

The operator of Ajánlatra respects your privacy and is committed to protecting personal data. This policy explains how we collect, use and protect data when you use ajanlatra.hu and the Ajánlatra application.

2. Data controller

• Patrik Cserpes, sole trader
• Registered address: Soproni utca 5., 9330 Kapuvár, Hungary
• Email: info@sotevian.hu

3. Data we process

• Login data: for email sign-up, your email address and encrypted password; for Google sign-in, the name, email address and profile picture provided by Google.
• Billing and subscription data: for paid plans, billing name, address, tax number and subscription status. Card details are handled exclusively by Stripe; we do not store them.
• Data recorded in the app: quote contents, customer details you enter (name, phone, address), and voice recordings and transcripts used to create quotes.
• Technical data: IP address, browser type, usage data, cookies.

4. Purposes and legal bases

• Providing the Service: login, creating, storing and sending quotes. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Operating and securing the application. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Marketing: only with your explicit, voluntary consent (Art. 6(1)(a) GDPR). We may contact you by email, SMS or phone with tips for winning customers and with Sotevian's services for businesses (websites, SEO, ad management, social media). You can withdraw consent at any time in Settings, on the /leiratkozas page or at info@sotevian.hu; withdrawal does not affect prior processing. We keep the fact and time of consent for 5 years after withdrawal as proof.

5. Your customers' data

For customer data you enter, you are the data controller and we act as data processor: we process it solely on your instructions to provide the Service.

6. Storage and processors

Data is stored on servers within the European Union. We use the following providers:

• Cloud hosting and database provider (EU data centre)
• Google: sign-in
• Stripe Payments Europe Ltd.: payments
• Resend: sending email
• AI provider for speech recognition and text processing: processing of recordings and transcripts. Processing may take place outside the EU under the EU-US Data Privacy Framework or standard contractual clauses.
• OpenStreetMap Nominatim: converting a location into an address; only coordinates are sent.

6/A. Retention

We do not sell data to third parties. We keep data while your account exists and for 30 days after deletion, unless the law requires longer. When you delete your account, your quotes and their public links are deleted too.

7. Your rights

You have the right to access, rectify or erase your personal data, restrict processing, data portability and to withdraw consent. To exercise these rights, write to info@sotevian.hu. You can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (naih.hu).

8. Cookies

The site uses cookies necessary for its operation. With your consent we also load anonymous statistics (Microsoft Clarity) and ad measurement code.

Meta Pixel: we use the Meta Pixel to measure and target our Facebook and Instagram ads. Our partner is Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland). The pixel only loads after you consent in the cookie bar; we never send it your name, email or phone number. You can withdraw consent anytime via "Cookie settings" in the footer.

9. Chat assistant and issue reports

We retain assistant questions and replies for 90 days to improve the service, without account identifiers and with email addresses, phone numbers and financial identifiers masked. Masking cannot guarantee full anonymity: do not enter personal or confidential data. Questions and, for signed-in users, only the plan and team role are sent to the text-processing service; the assistant cannot access quotes or customer data. Report email addresses and descriptions are used to handle the report. The conversation lives in the browser tab session and is cleared on sign-out. To prevent abuse we use human verification and short-lived daily counters based on a secret-keyed IP hash; no raw IP is stored in assistant logs.