Privacy Policy
Last updated: March 2026
1. Data Controller
4YES Kft. (“4YES”, “we”, “us”) is the data controller. Contact: privacy@4yes.hu
2. What Data We Collect
- Account data: name, email, profile photo (via Clerk)
- Usage data: session activity, feature usage, security logs
- Business data: contacts, calendar events, etc.
3. Legal Basis (GDPR Art. 6)
- Contract (Art. 6(1)(b)): to provide the 4YES Platform service
- Legitimate interests (Art. 6(1)(f)): security and fraud prevention
- Consent (Art. 6(1)(a)): analytics and non-essential cookies
4. Data Storage and Transfers
All platform data stored in EU (Ireland, eu-west-1). Auth processed by Clerk, Inc. (USA) under Standard Contractual Clauses.
5. Your Rights (GDPR Art. 15–22)
- Access, Rectify, Erasure — delete account via Settings → Account
- Data portability — export via Settings → Export
- Withdraw consent at any time via cookie banner
Contact: privacy@4yes.hu
6. Data Retention
Account/business data: subscription duration + 90 days. Log/webhook data: 30 days. Account deletion: all PII erased within 30 days.
7. Cookies
Essential session cookies required for auth. Non-essential cookies require consent via the cookie banner.
8. Contact and Complaints
privacy@4yes.hu — or contact NAIH (naih.hu) to file a complaint.