HUEN
Log inStrategy call
Legal

Privacy Policy

Effective: 4 November 2026

In short

  • We only ask for what we need to handle your enquiry or your account.
  • We use no analytics, tracking or advertising cookies, and we never sell your data.
  • The external scheduler (Calendly) only loads if you allow it.
  • The chat assistant in the bottom-right corner is an AI. We don’t store the conversation in a database.
  • You can delete your account on the My account page at any time, and you can ask for a copy, correction or deletion of your data: info@pinglemon.com

Data controller

Name
[CÉGNÉV VAGY EGYÉNI VÁLLALKOZÓ NEVE]
Registered office
[SZÉKHELY: IRÁNYÍTÓSZÁM, VÁROS, UTCA, HÁZSZÁM]
Registration number
[CÉGJEGYZÉKSZÁM / NYILVÁNTARTÁSI SZÁM]
Tax number
[ADÓSZÁM]
Phone
—

We are not required to appoint a data protection officer. For any privacy question, contact us at the email address above.

What data we process and why

WhenWhat dataPurpose and legal basisHow long we keep it
Contact form (strategy call request)
Name and email address (required). Company or website, area of interest, budget range, description of your challenge (optional). Interface language.
To answer your request, prepare the call and put together a quote. Legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)). We receive the details by email; they are not stored in a database.
If no contract follows: 1 year after our last contact. If a contract follows: 5 years after it ends (civil-law limitation period); invoices for 8 years under Hungarian accounting law.
Booking a call (Calendly)
Name, email address, the chosen time, and anything else you enter when booking.
To schedule the strategy call, confirm it and send the call link. Legal basis: GDPR Art. 6(1)(b).
Same as the contact form details.
AI chat assistant (bottom-right corner of the website)
The text of the conversation. If you book a call or leave a message in the chat: name and email address (required), company and website (optional), the chosen time, interface language.
To answer your questions, book the call and handle your request. Legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)). We don’t store the conversation in a database: it is sent to the AI provider to produce the reply, and when you book or send a message we receive it by email together with your details. The booked time is stored without any personal data so it can’t be booked twice.
Same as the contact form details.
User account (client portal)
Name, email address, company (optional), an irreversible hash of your password, interface language, registration time, and whether your email address is confirmed.
To create your account, let you sign in and provide the client portal. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
Until you delete the account, which you can do on the My account page at any time. Unconfirmed sign-ups are deleted automatically after 7 days.
Sign-in codes and session
The 6-digit code we email you and your session identifier — both stored only as hashes.
Secure sign-in and password reset. Legal basis: GDPR Art. 6(1)(b).
Codes are valid for 10 minutes and deleted after 1 day. Sessions last 1 day, or 30 days with “Remember me”, or until you sign out.
Abuse prevention
A pseudonymised hash of the IP address and email address, and the number of attempts.
To protect accounts against password and code guessing. Legal basis: legitimate interest (GDPR Art. 6(1)(f)) — the security of accounts and the service.
Until the rate-limit window ends (at most 1 hour), then deleted automatically.
Visiting the website (server logs)
IP address, time, the page opened, browser type.
Operating and protecting the website. This data is processed by the hosting provider. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
According to the hosting provider's logging practice.
Emailing us
Email address, name, message content.
To answer your question. Legal basis: GDPR Art. 6(1)(b) or legitimate interest (f).
1 year after the matter is closed; contract-related correspondence for as long as the contract.

Without the required details we can't respond to your request or create an account. Fill in the optional fields only if you want to.

Who can access your data

We never sell your data or share it for advertising. We use the following providers to run the service; they process data on our behalf and only as far as needed:

ProviderWhat we use it forTransfers outside the EU
Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA
Website hosting and server logs
USA — EU–US Data Privacy Framework and standard contractual clauses
Databricks, Inc. (Neon adatbázis-szolgáltatás / Neon database service), 160 Spear Street, 15th Floor, San Francisco, CA 94105, USA
Database for user accounts
Stored in the EU (AWS Frankfurt, Germany). If the US parent company has access: EU–US Data Privacy Framework and standard contractual clauses
Zoho Corporation B.V. (Zoho Mail, ZeptoMail), Beneluxlaan 4B, 3527 HT Utrecht, Hollandia / Netherlands
Sending and receiving email: sign-in codes, notifications, forwarding enquiries to us
Stored in Zoho's EU data centres. If a Zoho group company outside the EU (e.g. support) has access: standard contractual clauses
Calendly LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA
Booking calls — only if you allow the scheduler to load
USA — EU–US Data Privacy Framework
Anthropic (Claude API), [ANTHROPIC SZERZŐDŐ FÉL CÍME — LÁSD A CLAUDE CONSOLE SZERZŐDÉSI FELTÉTELEIT]
Producing the chat assistant’s replies (artificial intelligence). It receives the text of the conversation to write a reply; under its terms it does not train models on it.
USA — [TO BE COMPLETED BASED ON ANTHROPIC’S DATA PROCESSING ADDENDUM (DPA)]

We only disclose data to authorities where the law requires us to.

Cookies

The website only uses cookies and local storage that it needs to work. We use no analytics or advertising cookies. See the Cookie Policy for details.

Automated decision-making

We make no decisions about you based solely on automated processing, including profiling. The chat assistant answers your questions automatically but makes no decisions about you. A person reads what you submit in the contact form and in the chat, and a person confirms every booking.

How we protect your data

  • The site is served over an encrypted (HTTPS) connection.
  • Passwords are stored only as irreversible hashes (scrypt); sign-in codes and session identifiers are stored only as hashes too.
  • Signing in requires a one-time code sent by email on top of your password.
  • We limit the number of attempts.
  • The sign-in cookie can't be read by JavaScript and can't be sent from other websites.

Your rights

  • Access: you can ask what data we hold about you and get a copy (GDPR Art. 15).
  • Rectification: you can ask us to correct inaccurate data (Art. 16).
  • Erasure: you can ask us to delete your data (Art. 17). You can also delete your account yourself on the My account page.
  • Restriction: you can ask us to temporarily stop using your data (Art. 18).
  • Portability: you can ask for the data you gave us in a machine-readable format (Art. 20).
  • Objection: you can object to processing based on legitimate interest (Art. 21).

Send your request to info@pinglemon.com. We reply within one month at the latest; where justified, GDPR Art. 12 allows us to extend this, and we'll tell you in time if we do.

Complaints

If you feel we have breached your data protection rights, please write to us first so we can put it right. You can also lodge a complaint with the supervisory authority:

Authority
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address
Falk Miksa utca 9–11, 1055 Budapest, Hungary
Phone
+36 1 391 1400

You can also go to court; you may bring the case before the regional court of your place of residence or stay.

Changes to this policy

If our data processing changes, we update this policy; the current version is always available on this page.

Legal background: Regulation (EU) 2016/679 (GDPR) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information.