Privacy Notice

1. Who processes your data

• Name: Dávid Szél, sole trader (egyéni vállalkozó)
• Registered seat: Bocskai utca 24., floor −1, door 3, 5600 Békéscsaba, Hungary
• Registration number: 61934993 · Tax number: 91804026-1-24
• Email: info@windyapp.hu
• Website: windyapp.hu

We are not required to appoint a data protection officer and have not appointed one. For any privacy matter, use the email address above.

2. Who this notice covers

• Visitor — anyone who opens windyapp.hu, tries the browser demo, or requests a callback.
• Subscriber — the business or sole trader who orders Windy.
• Caller — anyone who dials a Subscriber's Windy number and talks to the assistant.

3. If you just visit the site

3.1. Language detection. To determine your country we send your IP address to ip-api.com. We cache the result per network — without the last part of the IP and under a hash — for 24 hours, so that many visitors from one office produce a single lookup. The suggestion is not stored against you.

3.2. Fonts and stylesheets. The site loads fonts from Google Fonts (fonts.googleapis.com, fonts.gstatic.com) and its stylesheet from Tailwind CSS (cdn.tailwindcss.com). When these load, your browser sends your IP address to those providers. This is needed for the page to render; we do not use it for tracking.

3.3. Cookies. The site uses no analytics, marketing or tracking cookies. There is no Google Analytics, no Facebook pixel, no advertising identifier. What we store is your language choice in your browser's local storage and, once you sign in, your session identifier. These are necessary for the service to work, so we do not ask for consent for them.

4. If you try it or subscribe

4.1. Browser demo call. If you start the demo, the audio from your microphone is sent to our voice platform for the duration of the call, where it is converted to text, a reply is generated and turned back into speech. This means the audio reaches the speech recognition, language model and speech synthesis providers listed in section 5. Legal basis: your consent, given by starting the call and granting microphone access. Calls are capped at 90 seconds. You can withdraw consent by ending the call, and you may ask us to delete the recording afterwards at info@windyapp.hu.

4.2. Callback request. If you fill in the form, we process the name, email address, phone number and line of business you provide, in order to contact you. Legal basis: steps prior to entering into a contract, or your consent. If no subscription follows, we keep the data for at most 12 months, or until you ask us to delete it.

4.3. As a Subscriber. Your account holds your name, email address, phone number, business name and activity, plus the settings and Script you configure. Legal basis: performance of the contract. Retention: for the term of the contract, then deleted after a 30-day download window. Accounting records must be kept for 8 years under Hungarian law (Act C of 2000, section 169).

4.4. Payment. Card payments are handled by Stripe. We never see or store your card details — only Stripe does. We receive back the fact, amount and status of the payment.

4.5. Calendar connection (optional). If you connect your Google Calendar, we access your free slots and create events. This is used solely for appointment booking. Legal basis: your consent, given in Google's own interface, which you can withdraw at any time in your Google account settings or with us.

5. Who we share data with (processors)

We use the following providers to deliver the service. We do not sell data, and we do not share it for marketing purposes.

This list may change. If we engage a new processor, we update this notice and inform Subscribers by email.

6. Transfers outside the European Economic Area

As the table in section 5 shows, the core of the voice processing happens with US providers. This follows from the nature of the service: there is at present no European alternative for real-time Hungarian speech recognition and language modelling at this quality.

Such transfers rely on the Standard Contractual Clauses adopted by the European Commission and, where the provider participates, on the EU–US Data Privacy Framework. We have data processing agreements in place with these providers.

You should nevertheless know that US law permits government access in certain circumstances that does not match EU-level protection. We state this openly so you can decide with the facts in hand.

7. Call recording

7.1. Conversations between the assistant and the caller are recorded and transcribed. Without this the service could not do its job: it could not summarise what the caller said.

7.2. The assistant states in its very first sentence that it is a digital assistant and that the call is recorded. The system appends this notice to every greeting automatically — the Subscriber cannot switch it off.

7.3. Recordings and transcripts are accessible to the Subscriber whose number was called, and to us solely for operating the service and troubleshooting.

7.4. We store recordings and transcripts for the term of the contract. The Subscriber may delete them at any time in the dashboard. We delete them 30 days after the contract ends.

7.5. As a Caller you may ask us to delete the recording and transcript of your call. Write to info@windyapp.hu stating which number you called and roughly when. We will also pass your request to the business that controls the data.

8. Security

The website and dashboard are served over an encrypted connection (HTTPS). Database access is restricted by row-level authorisation rules: each Subscriber sees only their own data. Passwords are stored in a form that cannot be reversed. Card details never reach us.

In the event of a personal data breach we follow the law: we notify the supervisory authority within 72 hours and, where the breach is likely to result in a high risk, we inform the individuals concerned as well.

9. Your rights

Under the GDPR you may at any time request:

• Information and access — what data we hold about you, and why
• Rectification — if any of it is inaccurate
• Erasure — where the data is no longer needed or lawful
• Restriction of processing — for example while a disputed accuracy is checked
• Data portability — the data you gave us, in a machine-readable form
• Objection — to processing based on legitimate interest
• Withdrawal of consent — which does not affect the lawfulness of earlier processing

Write to info@windyapp.hu. We respond within 30 days at the latest, free of charge.

10. Where to complain

If you feel we have not handled something properly, please write to us first — most things are settled in one email. Either way, you may contact the supervisory authority at any time:

You may also bring proceedings before a court. If you are in the EEA, you may alternatively lodge a complaint with the supervisory authority of your own country of residence.

11. Changes to this notice

We update this notice when the service changes. We notify Subscribers by email of material changes before they take effect. The current text is always at windyapp.hu/privacy.html, and the binding Hungarian version at windyapp.hu/adatkezeles.html.

The terms on which the service is provided are set out separately in the Terms of Service.