Privacy Policy

Effective date: July 9, 2026

1. Introduction

Dexuro ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal data in connection with our website and services.

2. Data Controller

Dexuro is operated by IDŐBEN Számítástechnikai és Szolgáltató Korlátolt Felelősségű Társaság ("IDŐBEN Kft."), a company registered in Hungary under company registration number 01-09-661821, with its registered seat at 1152 Budapest, Kinizsi u. 94., Hungary.

3. What Data We Collect

We collect the following types of personal data:

• Account Data: When you create an account, we collect your email address and account settings.
• Business Data: Business name, location, contact information, and other details you provide to set up your account and manage your businesses.
• Review Data: Customer reviews and ratings submitted through our platform.
• Feedback Data: Private feedback messages from your customers who choose to send them through our private feedback channel.
• Email Data: If you upload customer email addresses to send review requests, we process those email addresses as a data processor on your behalf.
• Technical Data: IP addresses, browser type, device type, pages visited, time spent, referral sources, and other usage analytics collected through cookies and server logs.

4. Lawful Basis for Processing

We process your personal data based on the following lawful bases under GDPR:

• Contract: Processing necessary to provide the service and fulfill our obligations to you.
• Legitimate Interests: Processing for service improvement, security, fraud prevention, and analytics.
• Consent: Where explicitly requested (e.g., marketing communications).
• Legal Obligation: Where required by law.

5. Data Processing Role for Customer Emails

When you upload customer email addresses to send review requests, you are the data controller and Dexuro acts as a data processor. We process these email addresses solely to send review request emails on your behalf and in accordance with your instructions. We do not use these email addresses for marketing or other purposes.

6. Subprocessors

We use the following subprocessors to deliver our service:

Subprocessor	Purpose	Region
Cloudflare	Web hosting, CDN, DDoS protection	USA / EU
Resend	Transactional email delivery	USA
Paddle	Payment processing	Worldwide
Anthropic	AI reply suggestions	USA
Google	Places API for rating sync	USA

7. How Long We Retain Data

We retain personal data for as long as necessary to provide the service and comply with legal obligations. Specifically:

• Account data: Retained for the duration of your account and for 14 days after deletion (backup retention).
• Review and feedback data: Retained as long as your account is active or for 14 days after deletion.
• Technical/usage data: Retained for analytics purposes for up to 90 days.

8. Your Rights

Under GDPR and other applicable laws, you have the following rights:

• Right of Access: You have the right to request a copy of your personal data.
• Right to Rectification: You can request correction of inaccurate data.
• Right to Erasure: You can request deletion of your data (subject to legal obligations).
• Right to Data Portability: You can request your data in a portable format.
• Right to Object: You can object to certain processing activities.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your supervisory authority (in Hungary: NAIH — Nemzeti Adatvédelmi Hatóság).

To exercise any of these rights, contact us at [email protected].

9. Cookies

We use cookies to maintain your session and enhance your user experience. We use only a single session cookie and do not use tracking cookies or third-party advertising cookies. You can disable cookies in your browser settings, but this may affect functionality.

10. International Data Transfers

Some of our subprocessors are located outside the EU/EEA. Where applicable, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission to ensure adequate safeguards for data transfers.

11. Security

We implement technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. This includes encryption in transit via HTTPS, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:
Email: [email protected]
Operator: IDŐBEN Számítástechnikai és Szolgáltató Korlátolt Felelősségű Társaság ("IDŐBEN Kft."), registered in Hungary under company registration number 01-09-661821, with its registered seat at 1152 Budapest, Kinizsi u. 94., Hungary. For legal and privacy inquiries, contact [email protected].

This document is a template and does not constitute legal advice.