Privacy policy

Controller

Verde Holding Kft., 8220 Balatonalmádi, Mátyás király utca 65., Hungary. Company registration number (Hungary): 19-09-525260. Hungarian tax number: 32872608-2-19. Email: office@verdeholding.hu.

Privacy requests: office@verdeholding.hu.

What we process

• Account: email address, a hash of your password (scrypt — never the password itself), language, where you signed up from, timestamps and your email preferences.
• Security: a salted hash of the addresses you sign in from (never the IP address itself) for new-login alerts, and abuse-prevention counters deleted within a day.
• Payments: Stripe customer and subscription ids, your plan and billing period. Card details are handled only by Stripe and never reach us.
• Invoices: name, address, business ID or VAT number, amount and date, as an invoice under accounting law requires.
• Analytics: Verde analytics, which sets no cookies and stores no IP address; Google Analytics only with your consent.
• Company data: information from public registers, which may include the names of people holding roles in companies, as the register publishes them.

Legal bases

• Contract (GDPR Art. 6(1)(b)): your account and paid plan.
• Legal obligation (Art. 6(1)(c)): invoices and keeping them.
• Legitimate interests (Art. 6(1)(f)): account security, abuse prevention and publishing public company information.
• Consent (Art. 6(1)(a)): Google Analytics.

Processors acting for us

• Cloudflare (hosting and proxy)
• Neon (database, EU)
• Stripe (payments)
• Resend (sending email)
• bizonylat.hu (issuing invoices and reporting them to NAV, the Hungarian tax authority)
• Google (Analytics, with consent only)
• Telegram (internal operational notices, where an email address appears only masked, e.g. a***@example.com)

Some are based in the United States. Transfers rely on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.

Retention

• Your account and what belongs to it: until you delete the account.
• Invoices: eight years under Hungarian accounting law, including after the account is deleted.
• Abuse-prevention counters: at most one day.

Your rights

You have the right of access, rectification, erasure, restriction, objection and portability. You can download your data and delete your account yourself on the Settings page, or write to us.

You may complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi) or to the Hungarian authority (NAIH, naih.hu).