Privacy Notice
To be completed. This is the platform's own privacy notice. The table below lists what the system actually processes — derived from the code, so it is accurate; the legal wording is the Provider's.
1. Controller
Dr. Necz Dániel Ügyvédi Iroda (SimpLEGAL), 1147 Budapest, Telepes u. 118. 3. em. 6. a., Hungary. Bar registration number: 36066103 (Budapest Bar Association), tax number: 19139874-2-42. Data protection contact: daniel.necz@simplegal.eu, +36 30 010 5002.
2. What we process
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Account and sign-in | name, email, password hash, sign-in time | performance of contract | until the account is deleted |
| Invoicing | company name, address, VAT number, billing email | legal obligation | as required by accounting law (8 years) |
| Questionnaire and documents | answers given for the store | performance of contract | until the account is deleted |
| Withdrawal declarations | customer name, email, order data, bank details | processed on behalf of the store | as instructed by the store |
| Serving log | time and referring page of embedded document requests | legitimate interest (evidence of service) | 24 months |
| Security log | failed sign-ins, request counters, IP address | legitimate interest (abuse prevention) | 24 hours – 30 days |
| Outgoing email log | recipient, subject, message text (e.g. withdrawal confirmation, password reset), delivery status | performance of contract; for withdrawal emails processed on behalf of the store | 30 days after sending, immediately on account deletion |
3. Processors
| Processor | Role | Location |
|---|---|---|
| Railway Corp. | application and database hosting | EU |
| Plus Five Five, Inc. (Resend) | email delivery | EU servers (Ireland); US company (standard contractual clauses / EU–US Data Privacy Framework) |
| Stripe Payments Europe, Ltd. | card payments | EU |
| Barion Payment Zrt. | card payments | EU (Hungary) |
| KBOSS.hu Kft. (Számlázz.hu) | invoicing | EU (Hungary) |
| Anthropic, PBC | AI pre-fill: processing the short business description you enter and the public text of your website’s home page (only when you start it) | USA (standard contractual clauses / EU–US Data Privacy Framework) |
4. Your rights
Access, rectification, erasure, restriction, portability, objection. Account data can be downloaded at any time under Settings → Data and account, where the account can also be deleted.
5. Cookies
Our own site only uses first-party cookies:
| Cookie | Purpose | Lifetime |
|---|---|---|
| sl_session | signed-in session (HttpOnly) | 30 days, deleted on sign-out |
| sl_2fa | two-step sign-in: interim state between password and code (HttpOnly) | 5 minutes |
| sl_cookie_choice | remembers your choice on the cookie notice | 1 year |
| sl_ref | keeps the partner code until sign-up when you arrive via a referral link (?ref=) | 30 days |
We do not use a language cookie: the language is part of the address (/hu, /en). We do not use localStorage or sessionStorage. We run no advertising or third-party tracking scripts. If audience measurement (Plausible) is enabled, it only loads after you consent on the cookie notice.
Payment takes place on Stripe's or Barion's own pages, which use the provider's own cookies under the provider's privacy notice.
Documents embedded in webshops (embed code, direct link, PDF, withdrawal form) place no cookie or other stored identifier in the visitor's browser.
6. Remedies
Hungarian National Authority for Data Protection and Freedom of Information (NAIH), or the court of your place of residence.