Privacy Notice
Effective: 5 November 2026 (amended to add the change of hosting and of the server's operating environment, and the encrypted off-site backup).
This notice explains, pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (GDPR) and Act CXII of 2011 on the right to informational self-determination and on freedom of information (Infotv.), how Avenler (hereinafter: the Service) processes your personal data.
1. Who is the controller?
| Controller | Agro Automatika Kft. (hereinafter: the Operator) |
| Registered office / address | 3531 Miskolc, Kiss Ernő u. 17. |
| [email protected] | |
| Registration number / tax number | 05-09-039015 / 32476532-2-05 |
We have not appointed a data protection officer (the law does not require us to appoint one); you can reach us in data protection matters at the e-mail address above.
Two roles. The Operator is the controller of your own (user) data. However, the personal data that you enter into the Service about your own clients (client name, address, description of the work) are processed by you as controller; we merely store and process them on your behalf as a processor. This is governed by the Data Processing Agreement; if your client contacts us, we will redirect their request to you.
2. What data do we process, for what purpose, on what legal basis and for how long?
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| E-mail address, password (only as a one-way, salted hash), time of registration | creating the account and logging in, verifying the e-mail address, resetting the password | performance of a contract (Article 6(1)(b) GDPR) – the contract concluded for the use of the Service | until the account is deleted |
| Sign-in or registration with a Google account (only if you use the “Continue with Google” button): the verified e-mail address and the unique identifier of your Google account (“sub”) provided by Google; we do not store your Google profile name or picture | sign-in and registration with a Google account; linking your account to the Google account | performance of a contract (Art. 6(1)(b)) – you initiate it by pressing the button | until the account is deleted, or until you disconnect Google in your profile |
| Company details: name, address, tax number, telephone number, contact e-mail (if you provide them; for a sole trader these are personal data) | filling in the “Contractor” block of the quotation | performance of a contract (Article 6(1)(b)) | until the account is deleted, or until you change / delete the field |
| Acceptance of the Terms of Service and the Privacy Notice: which document, which version (effective date), the time and method of acceptance (registration or renewed acceptance); we do not store the IP address | proving that you read and accepted the terms when the contract was concluded and when the terms were amended | performance of a contract (Article 6(1)(b)) | until the account is deleted |
| System e-mails (confirmation and password reset e-mails, and the notification of account deletion): recipient e-mail address, content of the e-mail | verifying and recovering the account, confirming the deletion | performance of a contract (Article 6(1)(b)) | stored encrypted until it is sent, but for no more than 72 hours, even if sending fails; after handover we delete the content of the e-mail, and the recipient and the subject are kept for 14 days; kept in the “Sent” folder of the sending e-mail account for no more than 90 days, after which we delete it |
| Newsletter (only if you subscribe separately): the e-mail address and interface language of your account, when and how you subscribed (registration, profile or re-subscription), when and how you unsubscribed, and whether a given newsletter was sent to you; we do not store IP addresses | sending the newsletter about Avenler news, and proving your consent | consent (Art. 6(1)(a)), which you can withdraw at any time | the record of consent and withdrawal and the delivery status until the account is deleted (to prove the consent); we do not send you the newsletter after you unsubscribe |
| Pro waiting list (only if you sign up in the Pro window): the e-mail address you provided, your account ID, the interface language, when and where you signed up (which button), the fact of your consent and the version of this notice; we do not store IP addresses | solely one notification about the launch of the Pro plan | consent (Art. 6(1)(a)), which you can withdraw at any time (the “Unsubscribe” button in the Pro window, or on request) | until the notification is sent, but at most 24 months; immediately when the account is deleted; it is included in the data export |
| Satisfaction feedback (only if you fill in the short survey when the program asks): the rating (1–5 stars), the chosen topic, the text you enter, the interface language, your market/country setting, the time of submission, and whether we may reply by e-mail; the state of the survey prompt (the number of saved projects, the time of the last prompt and of the last answer, the “Don’t ask again” setting); we do not store the IP address or the browser identification string (user-agent) | improving the Service; if you tick that we may reply, we may answer your feedback at the e-mail address of your account; for a low (1–2 star) rating the Operator immediately receives an e-mail notification with the text (your e-mail address is not in the body of the message; it is in the reply-to address only if you allowed a reply) | consent (Article 6(1)(a)): filling in the survey is voluntary; the survey can be turned off on the Profile page | the text you entered is deleted automatically after 24 months, the rating and the topic are kept for statistics; all of it is deleted immediately when the account is deleted; it is included in the data export; we keep the notification e-mail in the receiving mailbox for no more than 1 year, and it remains in the “Sent” folder of the sending e-mail account for no more than 90 days |
| Feedback (a message sent with the “Feedback” button; also available without logging in): the name and e-mail address provided, the text of the message, the path of the page from which you wrote, and the time of sending | answering your inquiry, handling errors and suggestions | legitimate interest (Article 6(1)(f)): answering the inquiries of those who contact us | stored encrypted until it is sent, but for no more than 72 hours, even if sending fails; after handover we delete the content of the e-mail (your name and e-mail address are not included in the delivery data kept for 14 days); it reaches the Operator by e-mail; we keep it in our correspondence until it is answered, but for no more than 1 year, after which we delete it; it is kept in the “Sent” folder of the sending e-mail account for no more than 90 days |
| Translation suggestion (only if you send one from the language selector): your account ID, the language and key of the text, the suggested wording, your optional comment, the state of the suggestion, the time of submission and of the decision; your e-mail address is visible to the administrator only | reviewing and improving the interface translations | legitimate interest (Article 6(1)(f)): improving the quality of the Service | 365 days after the decision (acceptance, rejection or inclusion in an update); deleted immediately when the account is deleted; included in the data export (without the administrator’s note and the decider’s identifier) |
| Shared block library (only if you submit, copy or report a block): the content, name, description, category and market of the submitted block or room template, your account ID, the status, the time of submission, decision and publication, the reason code of the decision, the version of the accepted usage licence and the name shown in the library (optional, anonymous by default); the list of shared blocks you copied; your reports (reason, comment, time); your e-mail address is visible to the administrator only, never to other users; we do not store the IP address or the browser identification string (user-agent) | operating the shared block library, reviewing submissions, handling reports and notifying the submitter of the decision | performance of a contract (Article 6(1)(b)); the displayed name: consent (Article 6(1)(a)), revocable at any time; handling reports: legal obligation (Article 6(1)(c), DSA Articles 16–17) | an unpublished submission until it is withdrawn or the account is deleted; a published block remains after the account is deleted, but without your account ID and the displayed name (Terms, section 4.5); copies and your reports are deleted when the account is deleted; included in the data export (without the administrator’s note and the decider’s identifier) |
| Number of failed logins, time of lockout | protecting the account against brute-force attacks | legitimate interest (Article 6(1)(f)): the security of the system and the accounts | until the next successful login or until the lockout expires |
| IP address | rate limiting of registration, login, password reset and feedback sending (protection against abuse) | legitimate interest (Article 6(1)(f)) | only in memory, for the duration of the rate-limiting time window (1 minute – 1 hour); not stored by the application |
| Time of last activity (the time of the last request made with the account, updated at most every 5 minutes); for this we do not store the IP address or device data (the device data of signed-in sessions is described in the next row) | overview of the use of the Service (number of active users), managing accounts, and investigating errors and abuse by the Operator | legitimate interest (Article 6(1)(f)) | until the account is deleted; it ceases immediately upon deletion |
| Signed-in sessions (devices): the time of sign-in and of last use, the sign-in method (password or Google account), the device type, browser family, operating system and country (determined from the IP address on the server, from an offline database), the time of sign-out, and whether you want a notification e-mail about sign-ins from a new device; we do not store the IP address or the browser identification string (user-agent) | account security: reviewing the signed-in devices and signing them out on the Profile page, a notification e-mail on sign-in from a new device (can be turned off on the Profile page) | legitimate interest (Article 6(1)(f)): the security of the account and the Service | for 35 days from the last use or sign-out of the session, after which it is deleted automatically; immediately when the account is deleted; included in the data export |
| Integration API key (only if the Operator enables it for your account and you create a key on the Profile page): the fact and time of the permission, the key's name, public prefix and scope, the time of creation, expiry, revocation and last use, the number of calls; the secret key is stored only as a one-way SHA-256 hash (it is shown only once, when created); we do not store an IP address or user-agent string for the calls | reading your account's data from your own software (integration); identifying, limiting and revoking the key | performance of a contract (Article 6(1)(b) GDPR) – the contract concluded for the use of the Service | part of the account data: deleted immediately when the account is deleted (revoked keys too); included in the data export (without the secret and the hash) |
| Approximate location of the account: the country and city of registration and of the most recent login (determined from the IP address on the server, from an offline database); we do not store the IP address | the Operator's overview of the geographic distribution of registrations and active users (a map on the dashboard) | legitimate interest (Article 6(1)(f)) | until the account is deleted; it ceases immediately upon deletion; it is included in the data export |
| Visitor statistics: the time of the visit and of the page views, the path of the page viewed (without identifiers), the country and city determined from the IP address, device type, browser family, operating system, the browser's primary language, the name of the referring site, a daily salted, irreversible code identifying the visit, and whether you were logged in (without a user identifier) | understanding the use and load of the Service, improving its operation | legitimate interest (Article 6(1)(f)) | for 400 days from the visit, after which it is deleted automatically; we do not store the IP address or the browser identification string (user-agent) |
| Technical operating log (error log; exceptionally an e-mail address, e.g. when sending an e-mail fails), connection log with IP addresses of the network device in front of the server (reverse proxy, Cloudflare Tunnel) | troubleshooting, investigating security incidents | legitimate interest (Article 6(1)(f)) | no more than 30 days |
| Anonymous error log: the message of errors occurring in the browser or on the server, the error trace (stack), the route of the page without query string, the number of repetitions and the time of the first and last occurrence; we do not store IP addresses, browser identifiers (user agent), e-mail addresses or user identifiers (e-mail addresses and identifiers appearing in the text are masked) | finding and fixing errors | legitimate interest (Art. 6(1)(f)): troubleshooting, security of the Service | 30 days from the last occurrence |
| The content you enter: projects, customer data, price offers, floor plans, measurement records (name, authorization number, company of the person performing the measurement), own catalog items; the name, decision and justification of the designated auditor for the audit of the revision; in the technical description, the responsible designer’s name, ART and CREA/CFT number; on the connection data sheet, the consumer unit (UC) number | provision of the Service; you are the data controller (see point 1) | your legal basis, the Operator acts as a processor | until the revision or project is deleted; immediately upon account deletion |
| Project sharing: which project you shared, with which user, with what permission (viewer / editor), and when; in the invitation e-mail, the sharer's company name or e-mail address and the name of the project; if the owner set one, the expiry date of the share; the time the member last opened the project (visible to the owner); whether viewers may export | joint work of two users on a project at the request of the project owner; notifying the invitee | performance of a contract (Article 6(1)(b)); notifying the invitee: legitimate interest (Article 6(1)(f)) | until the sharing ends (the owner removes the member or the member leaves), or until the project or any account concerned is deleted |
| Client link (viewing without login): when the link was created, its expiry, type (quote or plan package), language, when it was revoked, the number of views and the time of the first and last view (without IP address or browser identifier), and, if the client accepts: the name the client entered, the variants and options the client chose, the accepted total and the time of acceptance; a snapshot of the content sent in the link. Only an irreversible fingerprint of the link's secret code is stored. You, the designer, are the controller; we store it as processor | showing the quote or plan package and recording the client's acceptance at the designer's request | your legal basis (preparing/performing the contract between you and your client); the Operator acts as processor | until the link, the project or the account is deleted (also after the link expires, until you delete it); included in the user export |
| Project comments: the text, author and time of a comment or reply, its project and floor identifier, drawing anchor, mentioned members, and notification read/delivery state | coordinating project members and notifying a member affected by a mention or reply | performance of a contract (Article 6(1)(b)); notification e-mail: legitimate interest (Article 6(1)(f)) | until the project or account is deleted; included in the user export |
| On-site mode (fault description and photo): the status, fault description and the photo you upload, recorded for a device or a room (the photo may accidentally show a person, a licence plate or the inside of a home); the photo is stored without EXIF and GPS data; you act as the controller of these, we store them as processor | documenting on-site surveys, faults and repairs on the project | performance of a contract (Article 6(1)(b)) | until the project or the account is deleted; included in the user export; remains in the database backups for 90 days |
| Photos (on-site mode and designer): the photo you upload (it may accidentally show a person, a licence plate or the inside of a home), when it was taken, its size, and the device, room, fault, distribution board or measurement report you attach it to; the photo is stored without EXIF and GPS data; the other members of the project (including a reader of a shared project) can see it; you act as the controller of these, we store them as processor | documenting on-site surveys, faults and repairs, and attaching the photo to the distribution board, the measurement report and, if you turn it on, the printed documentation package | performance of a contract (Article 6(1)(b)) | until the project or the account is deleted; included in the user export (with its attachments); remains in the database backups for 90 days |
| Database backups (a copy of the above data) | protection against data loss, recovery | legitimate interest (Article 6(1)(f)) | for 90 days, after which they are deleted automatically |
| Your requests relating to the account (e.g. a data request) and the replies to them | fulfilling data subject rights, accountability | legal obligation (Article 6(1)(c)) | for 5 years from the fulfilment of the request |
| Daily activity of the account: on which days the account used the Service (only the account identifier and the date, at most one entry per day); we do not store the IP address | aggregated analysis by the Operator of usage patterns per country (the country is the approximate location detected at registration) | legitimate interest (Article 6(1)(f)) | for 24 months from the day concerned, after which it is deleted automatically; deleted immediately when the account is deleted; included in the data export |
For processing based on legitimate interest we have carried out a balancing test; we will send its findings on request. We do not use personal data for advertising, profiling or automated decision-making, and we do not sell them.
Unconfirmed registrations are kept for no more than 30 days, after which they are deleted.
Sign-in with a Google account. You can register and log in with an e-mail address and password, or with a Google account using the “Continue with Google” button. When you press the button, your browser goes to Google’s site, where Google handles your Google account and your authentication as an independent controller, under its own privacy policy. From Google, Avenler receives (OpenID Connect; scopes: openid, email, profile) your verified e-mail address and the unique identifier of your Google account (“sub”), and we store only these two; we do not store your Google profile name or picture, and we read no other Google data (e.g. calendar, Drive). When a new account is created, we log your acceptance of the Terms of Service and this privacy notice as for any registration. The Service remains fully usable without a Google account, with an e-mail address and password. You can disconnect the Google link at any time on the Profile page (if your account has a password; for an account created with Google, set a password first).
Visitor statistics. The measurement works without cookies and without an identifier stored in the browser: when the page loads, your browser tells the Operator's server which page you are viewing and its primary language. From your IP address and your browser type, the server computes a code salted with a daily key that exists only in memory (it serves only to distinguish visits on that day; on the next day it no longer matches), and determines the country and city from the IP address within the server, from an offline database (DB-IP Lite); the IP address is not transmitted anywhere and is not stored. We also use the country calculated from your IP address to set the initial value of country selectors (for example for standard references): this happens within the server, without storing or logging it. If your browser sends a “do not track” (Do Not Track) or Global Privacy Control signal, no measurement takes place. Visits by the logged-in administrator are not measured either. You may object to the processing as described in section 5.
Feedback. With the “Feedback” button in the bottom right corner of the page you can send a message to the Operator even without logging in; the name, e-mail address and message are required for this (this is voluntary: if you do not provide them, the form cannot be sent; this does not affect the use of the Service). The application stores the message only until it is sent, encrypted, for no more than 72 hours: it reaches the Operator by e-mail, who replies to the address provided. The application does not send any e-mail to the address provided; the form only creates an e-mail addressed to the Operator. We do not store your IP address; the rate limiting against abuse uses it only in memory, for one hour. You may object to the processing as described in section 5, and you may request the deletion of your message at any time.
Sharing a project. The owner of a project may share the project with another registered user, with viewing or editing rights, by entering that user's e-mail address. In that case the user with whom it is shared (the member) sees the content of the project, including the client data; this is the owner's decision (as controller of the client data, the owner is responsible for having an appropriate legal basis for the sharing). The owner sees the member's e-mail address and (if provided) company name in the sharing list; the member sees the owner's company name (but not the e-mail address). The feedback on an invitation is always the same, whether or not such an account exists; the invitation e-mail is sent to the address entered. An editor member cannot manage the project details, archiving or sharing; a viewer cannot change anything. On account deletion: if the owner deletes their account, their projects also cease to exist for the members (the members retain no copy); if a member deletes their account, their share ends and the project remains with the owner. Sharing can be ended at any time (the owner removes the member; the member may leave). The owner may set an expiry date for the share (at the end of that day the member loses access) and may prevent viewers from exporting; in the sharing list the owner sees when the member last opened the project and the expiry date.
Project comments. An owner, editor or reviewer can create a thread or reply at a drawing point or element and mention another project member as @name. Project members see the comment text, the author's display name and its drawing anchor. A mentioned member or thread participant receives an in-app notification; a consolidated e-mail is sent at most once every 30 minutes and can be turned off on the Profile page. Comments and notification state are included in the data export.
Newsletter. We send a newsletter only if you consent to it separately: the newsletter checkbox at registration is unticked by default, and consent is a condition neither of registration nor of using the Service; you can switch it on and off at any time on your profile page. Every newsletter has a one-click unsubscribe link at the bottom and in the e-mail header (the “Unsubscribe” button of mail clients), which works without logging in. The newsletter is sent in your interface language where a translation exists, otherwise in Hungarian. The newsletter contains no tracking (open or click tracking) elements. Withdrawing your consent does not affect the lawfulness of processing before the withdrawal. The provisions on the newsletter take effect on 8 October 2026.
Purchase price list and ordering. If you use the Purchasing feature, the program stores the data of the wholesalers you add (name, customer number, currency and the contact's email address, which may be personal data), the price list you load and its matches to catalog items, the purchase-price snapshot and the margin of the quotation lines, and the log of the orders sent (the recipient's email address, the number of items and the time; not the content of the message). The purpose is to calculate the purchase cost and the margin and to prepare the order list; the legal basis is the performance of a contract (Article 6(1)(b)). An order email is started only by you, after confirmation, to the address you saved for the wholesaler; the message is relayed by our email service provider. This data is yours only: members of a shared project and other users cannot see it, it does not appear in the quotation or the printout; it is deleted when the account is deleted, and it is included in the data export.
Providing the data required for the account (e-mail, password) is necessary; providing company details is voluntary; without them the Service can be used, but the corresponding fields on the quotation remain empty.
<!-- kozos1c-collab -->Live collaborative editing. In a shared project, project members can see each other's displayed name, role, presence on a floor, cursor and selection. This data exists only in server memory for the duration of the connection; it is not logged and is removed when the connection ends.
AI assistant. When signed in, you can ask a question to an AI-based assistant in the help and in the drawing editor; the feature is voluntary and works only when you ask. To prepare the answer, the text of your question, up to the 4 previous question-and-answer rounds, the interface language and a short page identifier are sent to the Claude API of Anthropic PBC (USA), which is our processor (section 3). The text of the question and of the answer is not stored on our side (not even in logs); we keep only per-user, per-day counters (number of questions, token volume) to keep to the daily quota and to track costs, and they are deleted when your account is deleted. Do not enter personal data in your question (the interface also warns you). Legal basis: performance of the contract (GDPR Article 6(1)(b)) – you request the answer. The data goes to the United States (a third country); processing and retention on Anthropic's side are governed by the provider's own terms and privacy policy.
3. Who receives the data? (recipients, processors)
| Recipient | For what | Which data | Where |
|---|---|---|---|
| Rackhost – e-mail service (SMTP) | delivery of system e-mails and feedback messages | the recipient's e-mail address, the content of the e-mail (link); for feedback, the name, the sender's e-mail address and the message | EEA |
| Google Ireland Limited (together with members of the Google group) – sign-in with a Google account (identity provider; only if you use the button) | sign-in and registration with a Google account; Google acts as an independent controller here | the verified e-mail address and Google account identifier that Google passes to us at sign-in (this is all we store); Google handles the data it processes under its own privacy policy | EEA; for intra-group transfers to a third country (USA), Google relies on its certification under the EU–US Data Privacy Framework or on standard contractual clauses (SCC) |
| Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA) – network protection and traffic forwarding (reverse proxy) | availability and protection of the Service: forwarding traffic, filtering out denial-of-service attacks and bot traffic; and bot verification (Cloudflare Turnstile) at registration, forgotten password and resending of the confirmation email | your IP address and the technical data of requests (time, the address requested, browser data); the traffic between your browser and our server – including the data submitted and displayed – passes through Cloudflare's network, which forwards it and may temporarily cache static files (e.g. images, scripts) | the Cloudflare data centre closest to you; the technical data of requests in the EEA and the USA; for transfers to the USA, Cloudflare relies on its certification under the EU–US Data Privacy Framework or on standard contractual clauses (SCC) |
| Anthropic PBC (USA) – AI assistant (Claude API) | preparing the answer to a question you ask in the help or the drawing editor (processor; only if you ask) | the text of your question, up to the 4 previous question-and-answer rounds, the interface language and a short page identifier | USA (third country); processing and retention on Anthropic's side are governed by the provider's own terms |
| Hosting: Private server | operating the application and the database (the hosting provider is a processor); the encrypted off-site backup | all data stored in the Service; the backup is encrypted on the client side, the key is held by the Operator | see the location named; a copy of the encrypted backup is held on the Operator's own device in Hungary |
| A member of the project (another user invited by the owner) | joint work on the shared project | the content of the shared project (client data, drawings, quotations) and the owner's company name | within the Service, at the owner's decision and according to the permission granted |
We do not disclose the data to any other recipient unless required to do so by law or by a decision of an authority. The Operator can technically access the database with its administrator access; it uses this only for troubleshooting, backups and fulfilling data subject requests, subject to a duty of confidentiality.
4. Data security
Measures protecting the data include, among others: one-way, salted storage of passwords; HttpOnly and SameSite protection of the session cookie; HTTPS connection (for live, public access); limiting login attempts and temporarily locking the account; request origin (Origin) checking; verification of backups; access restriction (each user can access only their own data and the projects shared with them, according to the permission granted; for other users' data the system responds “not found”). We report personal data breaches within the statutory deadline (to the NAIH within 72 hours of becoming aware of the breach and, in the event of a high risk, also to the data subjects).
5. What are your rights?
You can exercise two of your rights yourself, immediately, after logging in, on the Profile → My data page: downloading all your data (ZIP, JSON and CSV) and deleting your account. No request needs to be sent for this. You can exercise the other rights, or these rights where the self-service route is not available (e.g. you cannot log in), via the e-mail address. We will respond to your request without undue delay and in any event within one month (this may be extended by a further two months for particularly complex or numerous requests; we will inform you of the extension and the reasons for it within one month). Fulfilling the request is free of charge; for manifestly unfounded or excessive requests we may charge a reasonable fee or refuse to act. To verify your identity, we ask for a message from your registered e-mail address or, failing that, further identification.
- Access (Article 15 GDPR): you receive information as to whether we process data about you, and a copy of the data; you receive the copy immediately with the Profile → My data → “Download my data” button.
- Rectification (Article 16): you can correct your company details yourself on the Profile page.
- Erasure (“right to be forgotten”, Article 17): you can delete your account and all its data yourself with the Profile → My data → “Delete account” button (after entering your password and your e-mail address), or request it by e-mail. The deletion from the live database takes place immediately, cannot be undone, and you receive a notification e-mail about it; the data are deleted from the backups within no more than 90 days (the backup is not used in the meantime – should it nevertheless need to be restored, we will carry out the deletion again).
- Restriction (Article 18) and objection (Article 21) to processing based on legitimate interest.
- Data portability (Article 20): you receive the data processed for the performance of the contract in a machine-readable (JSON/CSV) format; the download is available immediately on the Profile → My data page.
- Complaint and remedy: if you feel that we have infringed your rights, please tell us first so that we can resolve the matter. You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH; 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; [email protected]; https://naih.hu), and – under sections 22–23 of the Infotv. – you may go to court; the action falls within the jurisdiction of the regional court (törvényszék) and, at your choice, may also be brought before the regional court for your place of residence or place of stay.
6. Cookies
We use only the session cookie required for logging in (the visitor statistics do not use cookies); details: Cookie and Local Storage Notice.
7. Children
The Service is intended for businesses; persons under 16 may not register.
8. Amendment of this notice
We may amend this notice if the law or the Service changes. We will notify you of material changes on the interface and/or by e-mail; the text in force can always be read here.
9. Users in the United States (privacy notice)
This section is for users who reside in the United States: it is the notice under the California Consumer Privacy Act (as amended by the California Privacy Rights Act, CCPA/CPRA) and similar U.S. state privacy laws, to the extent those laws apply to the Operator. It does not introduce any new processing: personal data is processed as described in sections 1–8, and this section does not limit your rights under section 5.
What categories of data do we collect? The data listed in section 2, for the purposes and periods stated there: identifiers and contact details (e-mail address; if you provide them, company name, address, phone number, tax number); account and login data (the password is stored only as a one-way, salted hash); the content you enter into the Service (projects, client data, drawings, quotations); data about your use of the Service (visitor statistics, the country and city derived from the IP address, device type, browser family, the time of your last activity; we do not store the IP address or the user-agent string); and the messages you send us (feedback). The data comes from you and from your browser. We use your account login data only to log you in and to protect your account, not to infer characteristics about you.
We do not sell or share your data (“do not sell or share”). We do not sell personal information, and we do not share it with third parties for cross-context behavioral advertising, whether for money or for other valuable consideration; nor have we done so in the past 12 months. The Service does not display ads and does not use third-party advertising or tracking code, and we do not use personal data for profiling. The recipients listed in section 3 receive the data only to provide the Service, for the purpose stated there.
Global Privacy Control (GPC). If your browser sends a GPC (or “Do Not Track”) signal, no visitor statistics are recorded (see section 2). Since we do not sell or share personal information in any case, there is no separate “Do Not Sell or Share” opt-out, and the signal does not affect any other processing.
Your rights.
- Right to know and access: you can find out which categories of data we have collected about you, from which sources, for what purposes, and to whom we have disclosed them, and you can obtain a copy of your data; you receive the copy immediately with the Profile → My data → “Download my data” button.
- Deletion: you can delete your account and all its data yourself with the Profile → My data → “Delete account” button (as described in section 5), or request it by e-mail.
- Correction: you can correct your company details yourself on the Profile page; you can request the correction of other inaccurate data by e-mail.
- Portability: you can download your data immediately in a machine-readable (JSON/CSV) format on the Profile → My data page.
- Non-discrimination: we will not deny you the Service, charge you a different price, or provide a different quality of service because you exercise your rights.
How to exercise your rights. Beyond the self-service features, you can send your request to our e-mail address; you may also submit a request through an authorized agent, in which case we ask for proof of the authorization. We verify your identity as described in section 5 and respond within the time limit stated there. If we deny your request, you can ask us to reconsider the decision at the same address.
Children. The Service is not intended for persons under 16, who may not register (section 7); we do not knowingly collect, and do not sell, the personal information of persons under 16.
Where the data is stored. Your data is stored at the hosting location named in section 3 (Private server); an encrypted backup copy is also held on the Operator's own device in Hungary; the Service is provided by an Operator based in Hungary (section 1). Data transfers that also involve the United States (Google, Cloudflare, Anthropic) are described in section 3.
<!-- kozos1b-review -->Revision control. The owner or editor can send a published revision to a designated project member for review. In addition to the revision, the displayed name of the designated inspector, the time of the request and the decision, the optional request message, and the mandatory justification for the rejection are stored. These are visible to project members; the control data remains together with the revision until it or the project is deleted.