Privacy Policy

This is a courtesy translation. In case of any discrepancy the Hungarian version prevails: Adatvédelmi tájékoztató.

This policy describes how Syntech Ventures Kft. (registered seat: 1136 Budapest, Hegedűs Gyula utca 32. 4. em. 9. ajtó; company registration number: 01-09-437271; e-mail: hello@bevetel.ai; hereinafter “we”) handles personal data while operating the Bevétel.ai service and the bevetel.ai website, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act CXII of 2011 on the right to informational self-determination and freedom of information.

1. The two roles in which we act

• As controller, we process the data of our customers (the businesses using the service) and their contact persons, as well as the data of website visitors.
• As processor, we process the data of the callers to whom the assistant texts on behalf of a business. The controller of this data is the business concerned; we act solely on its instructions, under the Data Processing Agreement. Callers exercise their rights primarily with the business; if they contact us, we forward the request.

2. What data we process, for what purpose and on what legal basis

• Account and service:the contact person’s name, e-mail address and mobile number, and the business’s details (name, address, services, prices, opening hours). Purpose: providing the service and keeping in contact. Legal basis: performance of a contract (GDPR Article 6(1)(b)). Retention: until the contract ends, then for at most 90 days.
• Billing: billing name and address, tax number, payment details. Card data is handled by Stripe and never reaches us. Legal basis: legal obligation (GDPR Article 6(1)(c), Section 169 of Act C of 2000 on accounting). Retention: 8 years.
• Customer support correspondence:the content of e-mails and the sender’s details. Legal basis: performance of a contract, or legitimate interest (responding to the enquiry). Retention: 1 year after the matter is closed.
• Website statistics: cookie-free, aggregated traffic and performance measurement (Vercel Web Analytics and Speed Insights), which does not identify the visitor and does not track them across other sites. Legal basis: legitimate interest (improving the website).
• Security and abuse prevention: technical logs (time, phone number, type of request), operating the message sending limits. Legal basis: legitimate interest. Retention: at most 90 days.

3. Callers’ data (as processor)

When a business does not answer the phone, the system receives the caller’s phone number and texts back by SMS. During the conversation we process the text of the messages exchanged and, if the caller provides them, the caller’s name, the requested service and when they would be available. The assistant does not ask for health data or other special categories of data, and refers professional questions to the business; if the caller shares such data anyway, we forward it solely to the business. The caller can stop the messages at any time by sending the word STOP. We delete the conversations within 90 days after the business’s subscription ends, or earlier if the business requests it.

The assistant’s responses are generated by artificial intelligence; the system makes no automated decision that produces legal effects concerning the caller or similarly significantly affects them. In its first message, the assistant tells the caller that they are talking to artificial intelligence.

4. Where we store the data

The database (accounts and conversations) is located in the European Union, in an EU region of Google Cloud. Certain parts of the service, namely the artificial intelligence, serving the website, call detection and e-mail sending, are performed by providers established in the United States. In these cases the transfer is based on the adequacy decision under the EU-US Data Privacy Framework or on the European Commission’s standard contractual clauses (SCC).

5. Our processors

• Google Cloud / Firebase (Google Ireland Ltd., Ireland): database, application hosting and sign-in, in an EU region.
• Anthropic PBC (USA): generating the responses from the text of the conversations (artificial intelligence). It does not use the data to train its models.
• Infobip (EU): sending and receiving SMS.
• Telnyx LLC (USA): detecting forwarded calls (the caller’s phone number).
• Vercel Inc. (USA): serving the website and cookie-free statistics.
• Resend (USA, with an EU sending region): system notification e-mails.
• Stripe Payments Europe Ltd. (Ireland): online payments.
• Google Workspace (Google Ireland Ltd.): e-mail correspondence.
• Google Calendar: only if the business connects its own calendar; the appointments are created in the business’s own account.

We do not sell personal data and do not share it for advertising purposes.

6. Cookies and local storage

The website does not use tracking or advertising cookies, so we do not ask for cookie consent. We store only what is needed for operation in the browser: the session data required for signing in (only for signed-in users), and a flag that you have already seen the offer pop-up, so it does not appear again. The statistical measurement works without cookies.

7. Data security

We transmit data over encrypted connections and store it encrypted; access is restricted to the people who need it. In the event of a personal data breach, we act in accordance with the law and notify the affected business without undue delay.

8. Your rights

You may request access to your personal data, its rectification, erasure, restriction of processing and portability, and you may object to processing based on legitimate interest. We respond to requests within one month at the latest. Write to hello@bevetel.ai.

You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9-11.; naih.hu), and you may also bring the matter before a court.

9. Contact

Syntech Ventures Kft., 1136 Budapest, Hegedűs Gyula utca 32. 4. em. 9. ajtó · hello@bevetel.ai