Legal information

Privacy notice

How the personal data you give on this website, in the chat, in the render demo and when booking a call is handled, and how business outreach emails use company contact data.

1. Controller

Tokár Ádám, sole trader (5700 Gyula, Szőlős utca 4/1., Hungary, tax number: 92003747-1-24, email: hello@lakberai.hu), "I" or "the service provider" below. For any data protection question, write to this address.

2. Contact, callback and demo booking

Data: name, studio name, email address and/or phone number, the chosen time, the content of your message. Purpose: answering your request, arranging the demo call, making an offer. Legal basis: your consent (GDPR Article 6(1)(a)) and steps taken at your request before entering into a contract (GDPR Article 6(1)(b)). Retention: 1 year from the last contact, or until you withdraw your consent.

Newsletter: if you sign up at the bottom of the page, I process your e-mail address, language, the page where you signed up and the time of signup and confirmation. Purpose: sending at most 2 newsletters a month about the service. Legal basis: consent (GDPR Art. 6(1)(a)), given with the button in the confirmation e-mail; without confirmation no newsletter is sent. Retention: until you unsubscribe; every e-mail has a one-click unsubscribe link. Unconfirmed signups are deleted after 30 days.

Business outreach to companies

Data: the company's name, public business email address, website, town and line of business, plus the emails sent and the replies received. Source: the company's own public website and public company registers. Purpose: one business email and at most 3 follow-ups about LakberAI. Legal basis: the provider's legitimate interest in winning business (GDPR Art. 6(1)(f)). Objection: the first email says where the address came from. You can object at any time (GDPR Art. 21): after a "no" reply or a click on the unsubscribe link at the bottom of the email, the address is blocked at once and no further email is sent. Retention: at most 2 years from the last email. After an objection or unsubscribe, only the address and domain are kept on the suppression list, solely so that no further email is sent to them (GDPR Art. 17(3) and 21(3)); the suppression list is kept for as long as an email system is operated.

The mail system runs on a Hetzner Online GmbH server in Germany; emails and mailboxes are handled by Rackhost Zrt. (Hungary) (see section 7).

3. The website chat

The chat is a digital assistant that answers questions about LakberAI and general interior design questions. Data: the text of the conversation and anything you choose to give (name, studio name, contact details). For an attached file, the content is used only for the reply and is not stored, only its name, type and size. Purpose: answering your questions, recording an enquiry and passing it on to me. Legal basis: consent (GDPR Article 6(1)(a)). Retention: the conversation for 30 days, enquiry data as in point 2. The read-aloud feature turns the reply text into speech and does not store the audio.

4. Render demo (Try it)

Data: the uploaded room photo, the chosen style, the finished render, a one-way hash of your IP address for the daily limit, and if you give them: name, email address, studio name, phone number. Purpose: making and showing the render, a daily limit against misuse, answering your request. Legal basis: consent (GDPR Article 6(1)(a)); for the daily limit, my legitimate interest (GDPR Article 6(1)(f)). Retention: the uploaded photo is deleted right after processing and at the latest after 24 hours; the finished image is available for 24 hours, then deleted automatically; the daily limit counter after 2 days; contact details as in point 2.

The photo is processed by OpenAI's image editing service to make the render (see point 7). Please upload a photo with no people and no personal information in it, and someone else's home only with the occupant's permission.

Campaign links: if you arrive through a link in an e-mail I sent you, the link contains a pseudonymous code. The website stores nothing in your browser for this; it only records that the page was opened from that link and whether a free trial was started from it (the code, the campaign name and the time; no IP address or e-mail address). Purpose: measuring which e-mails are useful to their readers. Legal basis: legitimate interest (GDPR Article 6(1)(f)). Retention: 12 months.

5. Cookies and local storage

This website uses only storage that is strictly necessary for it to work: the chat keeps a session identifier in your browser's session storage, which is cleared when you close the tab, and the site remembers that you dismissed the storage notice and your read-aloud setting. No analytics, marketing or tracking cookies are used. Fonts are loaded from this website's own server.

6. Data of the studios' clients

For the data of the clients of studios that use LakberAI (for example photos of a client's home, floor plans, contact details), the studio is the controller and I act as processor under a written data processing agreement with the studio (GDPR Article 28). I use encrypted transfers and role-based access, and I delete on request. Clients exercise their rights primarily with the studio.

7. Processors

  • Hosting, server functions and storage: Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany; data in the Nuremberg data centre, EU)
  • Former hosting, copies of data from before 27 October 2026 until they are deleted: Netlify, Inc. (512 2nd Street, Suite 200, San Francisco, CA 94107, USA)
  • Text processing in the chat and making the renders: OpenAI Ireland Ltd. (1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, Ireland)
  • Backup text processing in the chat when the primary one is unavailable: Anthropic Ireland, Limited (Ireland)
  • Read-aloud (text to speech): Eleven Labs Inc. (United States)
  • Sending email notifications: Resend (Plus Five Five, Inc., United States)
  • Sending text message notifications: Telnyx LLC (United States)
  • Shared booking calendar: Supabase, Inc. (United States; data in an EU data centre)
  • Domain and email: Rackhost Zrt. (6722 Szeged, Tisza Lajos körút 41., Hungary)
  • Sending business outreach emails from a self-operated mail system: Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany; EU data centre), mail relay: Rackhost Zrt. (6722 Szeged, Tisza Lajos körút 41., Hungary)

For processors outside the European Economic Area, transfers rely on the standard contractual clauses adopted by the European Commission (GDPR Article 46) or, where the processor is certified, on the EU-US Data Privacy Framework. Processors may use the data only on my instructions and only to provide the service.

8. Your rights

You can ask for access to your personal data, its correction or deletion, restriction of processing, and data portability, and you can object to processing. You can withdraw your consent at any time; this does not affect processing before the withdrawal. Send your request to hello@lakberai.hu; I reply within 1 month at the latest.

You can complain to the Hungarian data protection authority, Nemzeti Adatvédelmi és Információszabadság Hatóság (1055 Budapest, Falk Miksa utca 9-11., Hungary, naih.hu), to the data protection authority of the EU country where you live or work, or go to court.

9. Security

I transfer data over encrypted connections and limit access to what each task needs. In case of a personal data breach I act under GDPR Articles 33 and 34.

Effective from 31 October 2026.