1. Who is responsible
Core Engineering Kft., registered seat Váci út 99, H-1139 Budapest, Hungary, company registration no. 01-09-441199, VAT no. 32760765-2-41 (EU VAT HU32760765). Contact: assistant@aiseen.eu.
We are the data controller for the personal data described here (GDPR, Regulation (EU) 2016/679).
2. What we collect
- Scan form: business name, city, sector, customer language, website, phone (optional) and your e-mail address.
- Account: your e-mail address, a signed login cookie, and the login links we send you. No passwords are stored.
- Scan results: the questions we asked the AI engines, their answers, extracted business names, scores, tasks and reports. These are about businesses, not private individuals, but they may contain names of sole traders.
- Billing: plan, subscription status and a Stripe customer reference. Card details never reach our servers; Stripe processes them.
- Technical: IP address and timestamps in rate-limit counters and server logs, kept for abuse prevention.
We do not use advertising trackers, third-party analytics cookies or fingerprinting. The only cookie is the session cookie that keeps you logged in; a theme preference is stored locally in your browser.
3. Why we process it (legal bases)
- Running the scan and sending the report you requested — performance of a contract (Art. 6(1)(b)).
- Weekly monitoring, alerts and billing on paid plans — performance of a contract (Art. 6(1)(b)).
- Login links and service e-mails — contract and our legitimate interest in account security (Art. 6(1)(f)).
- Rate limiting and abuse prevention — legitimate interest (Art. 6(1)(f)).
- Invoices and accounting records — legal obligation under Hungarian accounting and tax law (Art. 6(1)(c)).
We do not send marketing e-mails unless you opt in, and every such e-mail contains an unsubscribe link.
4. Who receives data (processors)
- AI engines: the questions we ask contain your business name, city and sector only — never your e-mail. Engines currently used: OpenAI models via Microsoft Azure AI Foundry (EU region, Sweden Central); Google Gemini API; Perplexity API. Each engine processes the question under its own API terms, in which business API data is not used for training.
- Hosting: our server in the EU; backups stay in the EU.
- E-mail delivery: Resend (transactional e-mail).
- Payments: Stripe Payments Europe Ltd (Ireland).
Where a processor is outside the EEA, transfers rely on the EU Standard Contractual Clauses or an adequacy decision (e.g. the EU-US Data Privacy Framework).
5. How long we keep it
- Free scan data and reports: 12 months after the last scan, then deleted.
- Account and paid-plan data: for the life of the subscription and 12 months after it ends.
- Invoices and billing records: 8 years (Hungarian accounting law).
- Server logs and rate-limit counters: up to 30 days.
6. Your rights
You can ask us at any time to access, correct, export or delete your data, to restrict or object to processing, and you may withdraw consent where processing is based on it. Write to assistant@aiseen.eu from the e-mail address used for the scan; we answer within 30 days. Deleting your account deletes your businesses, scans and reports, except billing records we must keep by law.
You also have the right to lodge a complaint with a supervisory authority. Ours is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), naih.hu, or the authority of your own EU country.
7. Businesses named in reports
Reports list competitor businesses and source websites exactly as the AI engines named them. This is public business information. If you are a sole trader and want your name removed from a report, contact us and we will anonymise it.
8. Security
All traffic is encrypted (HTTPS). Login is by single-use magic links; secrets are kept out of the code base; access to production is limited to the operators of the service. If a breach affects you, we notify you and the authority as the GDPR requires.
9. Changes
We will post changes here with a new "last updated" date and, for material changes, e-mail account holders.