This Privacy Policy describes how personal data is processed in connection with the connectors.hu service (the "Service"), in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the "GDPR") and the Hungarian Act CXII of 2011 on the right to informational self-determination and on freedom of information (the "Privacy Act").
Name: Szota Szabolcs, sole proprietor (Hungarian: egyeni vallalkozo)
Registered seat: 3152 Nemti, Kossuth ut 67., Hungary
Tax number: 66269458-1-32
Contact email: szabolcs@aiamindennapokban.hu
Website: https://connectors.hu
(hereinafter: the "Controller")
The Controller has not appointed a data protection officer, as the conditions set out in Article 37(1) of the GDPR are not met. Data-protection enquiries can be addressed to the email address above.
| Data | Source | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Email address | Provided by User | Account identification, communication | Performance of the contract (GDPR Art. 6(1)(b)) | Until account deletion + 30 days |
| Password (hashed) | Provided by User | Authentication | Performance of the contract | Until account deletion |
| OAuth account identifier | OAuth provider | Simplified sign-in | Performance of the contract | Until account deletion |
The Service offers unified access to Hungarian and international business systems (e.g. NAV Online Invoice, Billingo, MiniCRM, UNAS, fal.ai, Wise). External credentials provided by the User (API keys, technical-user passwords, OAuth tokens) are processed as follows:
Legal basis: performance of the contract (GDPR Art. 6(1)(b))
Retention: until account deletion or revocation by the User.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| MCP call timestamp, tool name, response time | Debugging, rate-limit enforcement, capacity planning | Legitimate interest of the Controller (GDPR Art. 6(1)(f)) | 30 days |
| Hashed IP address | Abuse prevention | Legitimate interest | 30 days |
| Error log (stack trace, request id) | Bug fixing | Legitimate interest | 90 days |
The Controller has conducted a legitimate-interest assessment and concluded that the processing of the above data does not disproportionately affect the User's rights and interests, and is necessary for secure operation of the Service.
During the public beta, the Service is free of charge; the Controller does not process billing data. If the Service moves to paid plans, this Policy will be supplemented with a section on billing data processing (in particular regarding Stripe or another payment service provider).
The Service uses the following types of cookies and local-storage entries:
Consent can be withdrawn at any time via the "Cookie settings" link in the footer.
The Controller uses the following processors to operate the Service. The list is current; before any new processor is engaged, this Policy will be updated.
| Processor | Activity | Location | Reference |
|---|---|---|---|
| Supabase, Inc. (Singapore + EU region) | Database, authentication, Edge Function execution, file storage | EU region (eu-central-1) | https://supabase.com/privacy |
| Resend Operations, Inc. (USA) | Transactional email (confirmation, password reset, magic link, security notifications) | EU + USA | https://resend.com/legal/privacy-policy |
| Netlify, Inc. (USA) | Static website hosting and CDN | EU + USA | https://www.netlify.com/privacy/ |
| GitHub, Inc. (USA, Microsoft subsidiary) | Source-code storage (no personal data) | USA | GitHub Privacy |
Transfers to non-EU processors are covered by GDPR Article 46 Standard Contractual Clauses and the processors' Data Processing Agreements.
The Controller transfers the User's personal data to third parties only:
External credentials provided by the User (NAV, Billingo, etc.) are used exclusively to fulfil MCP calls initiated by the User's own AI agent. The recipient of the data is in every case the relevant external provider (e.g. the NAV API), and processing there is governed by that provider's privacy policy.
Under Articles 15-22 of the GDPR, the User (data subject) has the following rights:
Requests are accepted by the Controller at szabolcs@aiamindennapokban.hu and are fulfilled within 30 days of receipt. The Controller may extend this deadline by up to 60 days where necessary, with prior notice to the User.
The Controller retains personal data only for as long as necessary for the relevant purpose, as set out in section 2. Following deletion of the account:
Data that the Controller is required by law (e.g. accounting obligations) to retain is kept for the period prescribed by the relevant legislation.
In the event of a violation of data-protection rights, the User may lodge a complaint:
The Controller reserves the right to amend this Policy unilaterally. Changes are communicated within the Service; for material changes, registered Users receive prior email notice. Previous versions are available on request at szabolcs@aiamindennapokban.hu.
Version history:
v1.0, 17 May 2026, Initial publication.