Welcome Bonus

Privacy Policy

Last updated: 2026. 07. 18.
Legal

I. Introduction

1. Data Controller Information

The Data Controller (hereinafter: “Service Provider”) is the operator of the Smairthub online platform.

  • Company name: KirĂĄly Ingrid EV
  • Registered seat: 9030 Győr, Szőlőskert u. 13., Hungary
  • Tax number: 92213159-1-28
  • Registration number: 62565408
  • Contact email: legal@smairthub.com

2. Purpose and Structure of this Notice

This Privacy Notice governs the data processing activities performed during the use of the Smairthub core framework, user account management, operation of the Affiliate Program, and billing/payment processes.

The Platform’s individual functional components (“Modules”) perform specific file and data processing operations. These are described in separate annexes to this document.

II. Categories of Processed Data

1. Registration and Authentication Data

  • username
  • email address
  • OTP token required for authentication (temporary technical data)

Purpose: account creation, identification, login.

Legal basis: performance of contract (GDPR Art. 6(1)(b))

2. Optional Data – Mobile Phone Number

  • mobile phone number (for SMS verification)

Purpose: preventing abuse of promotional bonuses (e.g. welcome bonus), enhanced user verification via SMS.

Legal basis: user consent (GDPR Art. 6(1)(a)) and the Service Provider’s legitimate interest in fraud prevention (GDPR Art. 6(1)(f)).

3. Billing Data

  • name / company name
  • country
  • tax number (if applicable)
  • billing address
  • transaction data (amount, currency, timestamp, Stripe transaction ID)

Purpose: lawful invoicing, accounting, tax compliance.

Legal basis: legal obligation (GDPR Art. 6(1)(c)).

4. Balance and Usage Logging Data

  • balance top‑up history (amount, currency, timestamp)
  • number, type and fee of actions performed
  • technical usage logs

Purpose: operation of the USD‑based, usage‑based billing system, transparent balance tracking, auditability.

Legal basis: performance of contract (GDPR Art. 6(1)(b)) and legitimate interest (GDPR Art. 6(1)(f)).

5. Technical Data

  • IP address
  • browser type and version
  • device and operating system information
  • session identifier
  • functional cookies (see Cookie Policy)

Purpose: cybersecurity, bot protection, stable operation.

Legal basis: legitimate interest (GDPR Art. 6(1)(f)).

6. Exchange Rate API Usage

The system updates USD conversion rates daily using the following external API: https://open.er-api.com/v6/latest/USD.

Purpose: real‑time USD conversion for multi‑currency top‑ups.

7. Affiliate Program Data

  • referral cookie identifier (ref_id)
  • user email and/or internal user ID (UID)
  • successful registration (lead) status
  • credit purchase transaction amount and timestamp

Purpose: tracking registrations and purchases from referral links, calculating partner commissions.

Legal basis: legitimate interest (GDPR Art. 6(1)(f)) and user consent for marketing/tracking cookies (GDPR Art. 6(1)(a)).

III. Summary of Processing Purposes

1. Performance of Contract

Account registration, login, balance management, delivery of transactional and authentication messages, access to modules.

2. Legitimate Interest

System security, prevention of bonus abuse, usage log auditing, support ticket handling, affiliate tracking.

3. Legal Obligation

Mandatory invoicing via SzĂĄmlĂĄzz.hu, tax and accounting compliance.

IV. Data Transfers and Recipients

To operate the core framework, the Service Provider transfers data to the following external processors:

1. Stripe (Stripe Payments Europe, Ltd.)

Transferred data: payment transaction details.

Purpose: secure payment processing.

2. SzĂĄmlĂĄzz.hu (KBOSS.hu Kft.)

Transferred data: billing name, address, tax number.

Purpose: legally required invoice issuance.

3. SMS.to (Intergo Telecom Ltd.)

Transferred data: mobile number, OTP code.

Purpose: SMS‑based verification.

4. Resend (Resend, Inc.)

Transferred data: email address, OTP codes, system messages.

5. Cloudflare (Cloudflare, Inc.)

Transferred data: IP address, browser/device fingerprint.

6. FirstPromoter (FirstPromoter Inc.)

Transferred data: email/UID, referral cookie, purchase data.

Purpose: operation of the Affiliate Program.

7. OpenAI Ireland Ltd. / Microsoft Azure OpenAI

Data transferred: script or narration text provided by the User.

Purpose: text processing and narration preparation.

8. ElevenLabs Inc.

Data transferred: text required for voice synthesis.

Purpose: voice generation.

9. FAL Technologies Inc. (fal.ai)

Data transferred: avatar images, audio files, video audio tracks, and minimal metadata required for processing.

Purpose: image generation, lip-sync video creation, automatic subtitle generation, background music generation.

V. Data Retention Periods

1. User Account Data

Stored until account deletion or termination of contract.

2. Billing Data

Stored for 8 years as required by accounting laws.

3. Usage and Audit Logs

Stored for 2 years for fraud prevention and auditability.

4. Technical Logs

Stored for 30 days.

VI. Rights of the Data Subject

Under the GDPR, Users have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restriction of processing
  • Right to object
  • Right to data portability

Right to lodge a complaint: Users may contact the Hungarian Data Protection Authority (NAIH) or initiate court proceedings.

VII. Security Measures

  • fully encrypted data transmission (HTTPS / SSL)
  • strictly limited and protected database access
  • continuous automated security updates
  • automated audit logging of critical operations

VIII. Cookies

The Platform uses cookies for login sessions, security functions and affiliate tracking. Details are provided in the Cookie Policy.

IX. Contact

For any questions regarding data processing, Users may contact the Service Provider at legal@smairthub.com or via the internal support system.

Annex 1 – Spreadsheet AI Module Data Processing Terms

Smairthub – Module Specific Data Processing Terms

1. Nature of Data Processing

When using the Spreadsheet AI module, the User uploads tabular data files (CSV, XLS/XLSX). These may contain personal data, trade secrets or other confidential information.

The Service Provider acts solely as a Processor on behalf of the User and does not process these data for its own purposes.

2. Temporary Storage and Automatic Deletion

  • Purpose: analysis, transformation, cleaning, optimization.
  • Retention: maximum 12 hours.
  • Deletion: irreversible; no backups are kept.

3. AI Usage and Data Transfer

The module uses third‑party AI services. The full dataset is not transferred.

  • table structure
  • field types
  • a few sample rows

Enterprise‑grade AI endpoints ensure no long‑term storage and no model training.

4. User Responsibility

The User is responsible for lawful acquisition and handling of uploaded data.

Annex 2 – Social Factory AI Video Module Data Processing Terms

Smairthub – Module Specific Data Processing Terms

1. Nature of Data Processing

The Social Factory module processes scripts, avatar images, and generated audio/video content. These may contain personal data or confidential information.

The Service Provider acts solely as a Processor and does not use these data for its own purposes.

2. Temporary Storage and Automatic Deletion

  • Purpose: generation, preview, export.
  • Stored content: avatar images, audio files, lip‑sync videos, subtitles, background music, exported videos.
  • Retention: maximum 7 days.
  • Deletion: irreversible; no backups are kept.

3. AI Usage and Data Transfer

The module uses multiple AI services:

  • script processing
  • voice generation
  • image generation
  • lip‑sync video generation
  • subtitle generation
  • music generation

Transferred data:

  • script text
  • avatar image
  • text for voice generation
  • audio file for lip‑sync

Enterprise‑grade AI endpoints ensure GDPR compliance and no model training.

4. Pricing and Billing (Data Processing Context)

The module operates with direct USD‑based, usage‑based billing. Each action (script generation, voice generation, avatar creation/upload, lip‑sync video creation, subtitle generation, music generation, export) incurs a separate fee.

Transaction metadata (timestamp, action type, fee amount) is logged as part of the usage log.

5. User Responsibility

The User is responsible for ensuring that provided text, images and generated videos are lawful and do not infringe third‑party rights.

The module must not be used to generate unlawful, hateful, violent, sexually explicit content involving minors, deepfake impersonations, or political campaign material.

6. User Download and Retention Obligation

The module is not intended for long‑term storage. The User must download and store generated content within the 7‑day retention period.

Privacy Policy (GDPR) - SmairtHub