Draft. This text isn't final yet: the provider's details are missing, and it still needs a professional review before anyone pays. The English pages are a convenience translation; the Hungarian version prevails.
Contents
Draft convenience translation. This English text is provided for convenience only and has not been finalized. The Hungarian version is the binding one; if the two differ, the Hungarian version prevails.
Plain-language summary: What does Mondi hear and keep?
1. The data controller
name, address, tax number, email (hereinafter: the provider).
2. What data, for what purpose, for how long
| Data | Purpose | Legal basis | How long |
|---|---|---|---|
| Email address, account ID | Account, sign-in | Performance of contract (GDPR Art. 6(1)(b)) | Until the account is deleted |
| Plan, subscription status | Providing the service | Performance of contract | Until the account is deleted |
| Monthly word and command count, AI cost, daily request count | Limits, abuse prevention | Performance of contract, legitimate interest | e.g. 13 months |
| Voice recording | Converting speech to text | Performance of contract | Not stored: discarded after transcription |
| Dictated text | Cleanup, carrying out commands | Performance of contract | Not stored on the server; history stays on the user's computer |
| Billing details | Issuing invoices | Legal obligation (Hungarian Accounting Act, Section 169) | 8 years |
| Waitlist email address | Notification about the release | Consent | Until you unsubscribe, at most 6 months after release |
3. Data processors
- Supabase Inc. – database, sign-in, server (Frankfurt, Germany – EU).
- Vercel Inc. – website hosting.
- OpenAI, L.L.C. – speech-to-text (USA).
- Anthropic PBC – text cleanup, interpreting commands (USA).
- Stripe Payments Europe Ltd. – card payments.
- Invoicing software (Számlázz.hu / Billingo), email delivery provider.
Transfers to the USA are based on the EU–US Data Privacy Framework (where the provider is certified) or the European Commission's standard contractual clauses. To be checked per provider.
4. Your rights
Access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. You can send your request email address; we reply within 30 days. You can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa u. 9–11., naih.hu), or go to court.
5. Cookies
The website only uses the local storage it needs to work (sign-in). We don't use advertising or tracking cookies, so no consent banner is needed. If this changes, we'll update this section too.
6. Use of AI
Dictated text is cleaned up by artificial intelligence. You can turn this off in the app; the raw transcript is then typed in instead.