1. Introduction
Perk.hu ("Service") is a multimodal artificial intelligence (AI) based chat platform that allows users to upload text messages, images, and files for AI-based analysis and response generation.
This Privacy Policy aims to inform you about the scope of personal data we collect, the methods of use, data processors, and your rights under the European Union General Data Protection Regulation (GDPR) and Hungarian data protection laws (Info act).
2. Data Controller Information
3. Processed Personal Data
While using the Service, we process the following data:
3.1. Registration Data
- Email address
- Username / Name
- Profile picture (if using OAuth login)
- Password (encrypted)
3.2. Chat Data
- Text messages
- AI responses
- Chat history
- Generated documents
3.3. Multimodal Content
- Uploaded images (for AI analysis, temporary processing)
- Uploaded files and documents (PDF, text files)
3.4. Technical Data
- IP address
- Browser type and version (User Agent)
- Session ID
- Login timestamps
3.5. Payment Data
- Subscription status and plan type
- Stripe customer ID
Credit card data is handled directly by Stripe; we do not store it.
4. Legal Basis for Data Processing
The legal basis for data processing according to GDPR Article 6(1) is:
- Performance of a contract (b): Processing data necessary to provide the Service (registration, chat, AI processing).
- Consent (a): In case of newsletter subscription or marketing communication.
- Legitimate interest (f): Maintaining service security, fraud prevention.
- Legal obligation (c): Fulfilling accounting and tax requirements.
5. Multimodal AI Processing
Important: Perk.hu is a multimodal AI service capable of processing text, image, and file-based content.
Processing of uploaded images and files occurs as follows:
- Uploaded content is analyzed via the API of third-party AI providers (see: Data Processors).
- Images and files are processed temporarily to generate the AI response.
- AI providers process the shared content according to their own privacy policies.
- We recommend not uploading images or documents containing sensitive personal data.
6. Data Processors (Third Parties)
To operate the Service, we use the following third-party providers:
AI Providers
Note: Documents and queries submitted during the use of Legal AI are handled confidentially and are not used by AI providers for training their base models (LLM Training).
| Provider | Location | Purposes |
|---|
| OpenAI | USA | GPT models, text and image analysis |
| Anthropic | USA | Claude models, text generation |
| Google (Gemini) | USA | Gemini models, multimodal analysis |
| xAI | USA | Grok models |
| Meta | USA | Llama models |
| Mistral AI | France (EU) | Mistral models |
| DeepSeek | China | DeepSeek models |
Other Providers
- Vercel: Hosting services (USA, EU servers)
- Stripe: Payment processing (EU data center)
- Google: OAuth login
- GitHub: OAuth login
7. Data Retention Period
- User account data: Until account deletion or user request.
- Chat history: Until account deletion or user request.
- Uploaded files: For the duration of AI processing (temporary).
- Billing data: For the period required by law (8 years).
- Log files: Maximum 90 days.
8. Your Rights (Data Subject Rights)
Under GDPR, you are entitled to the following rights:
- Right to access: You can request information about the processed data.
- Right to rectification: You can request the correction of inaccurate data.
- Right to erasure ("right to be forgotten"): You can request the deletion of your data.
- Right to restriction: You can request the restriction of data processing.
- Right to data portability: You can request your data in a machine-readable format.
- Right to object: You can object to the data processing.
- Right to withdraw consent: You can withdraw your previously given consent at any time.
To exercise your rights, please write to privacy@perk.hu.
9. Data Security
To ensure data security, we apply the following measures:
- HTTPS encrypted connection
- Encrypted storage of passwords
- Access control and logging
- Regular security updates
- Encryption of sensitive data in the database
10. Cookies
The Service uses the following cookies:
- Session cookies: Maintaining login status (required).
- Preference cookies: Saving language settings.
- Analytical cookies: Analyzing website usage (optional).
11. Data Transfer to Third Countries
Some of our AI providers (OpenAI, Anthropic, Google, xAI, Meta) are headquartered in the United States. The legal basis for data transfer is provided by the EU-U.S. Data Privacy Framework, adequacy decisions, and Standard Contractual Clauses (SCC).
In the case of DeepSeek (China), we act with increased caution and recommend not using sensitive data with this model.
12. Legal Remedies
If you feel your data protection rights have been violated, you can file a complaint with the National Authority for Data Protection and Freedom of Information (NAIH):
- Name: National Authority for Data Protection and Freedom of Information
- Address: 1055 Budapest, Falk Miksa utca 9-11, Hungary
- Phone: +36 1 391 1400
- Email: ugyfelszolgalat@naih.hu
- Website: https://naih.hu
In case of legal remedy through court, you may also turn to the court competent for your place of residence.
13. Contact
For privacy inquiries, you can reach us at the following contacts:
This Privacy Policy is effective from January 27, 2026. We reserve the right to modify the policy; we will notify users of changes via email or through the website.