Privacy Policy
Effective: September 27, 2026 · Version 1.1
This is an English translation of our Hungarian privacy policy. If the two versions conflict, the Hungarian version prevails.
This policy provides information about the processing of personal data carried out in connection with the Trioralab service (trioralab.com), in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and applicable Hungarian law.
1. The data controller
- Name: Hajler Gábor Brendon, sole proprietor (egyéni vállalkozó)
- Registered office: 2837 Vértesszőlős, 124./A, Hungary
- Hungarian tax number: 92301650-1-31
- Email: team@trioralab.com
2. Data we process, purposes, and legal bases
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email address | creating your account, communicating with you | performance of a contract |
| Password (encrypted) | secure sign-in | performance of a contract |
| Store URL, crawled product data | operating the chatbot | performance of a contract |
| Billing / payment data | managing the subscription | legal obligation, contract |
| Usage statistics (number of questions) | managing the monthly allowance | performance of a contract |
| Chatbot conversations (question + answer) | letting the store owner see what shoppers ask | legitimate interest / contract |
We log chatbot conversations (shoppers’ questions and the bot’s answers) for the store owner, so that they can review what customers are asking — we keep these logs for no more than 90 days and then delete them automatically. We ask shoppers not to share sensitive personal data in the chat. Payment card details are handled exclusively by Stripe — the Service Provider has no access to them.
3. Data processors
We engage the following data processors to operate the Service:
- Vercel Inc. — website hosting, traffic analytics (Vercel Web Analytics — no cookies, aggregated data)
- Neon Inc. — database (EU region)
- Stripe, Inc. — payment processing
- Anthropic PBC — generating the AI responses
- Resend (Plus Five Five, Inc.) — email delivery
- Google LLC — business email (Google Workspace)
Some of these processors (Vercel, Stripe, Anthropic, Resend, Google) also process data in the United States. These transfers rely on the European Commission’s adequacy decision on the EU–U.S. Data Privacy Framework or, where that does not apply, on the Standard Contractual Clauses adopted by the Commission (Articles 45–46 GDPR).
4. How long we keep data
We process personal data for as long as the account exists, or until the end of the retention periods required by applicable law (e.g., accounting rules). When an account is deleted, the related personal data are deleted, except where the law requires them to be retained.
We retain billing data for 8 years from the date of issue, as required by Hungarian Act C of 2000 on accounting (legal basis: legal obligation) — even after the account has been deleted. If there is an outstanding, unsettled debt, we process the data needed to enforce the claim until the debt is settled or until the limitation period expires (legal basis: legitimate interest and the enforcement of legal claims).
5. Cookies
The website uses cookies that are necessary for it to work (functional cookies), for example for signing in and remembering your language choice. Visits are measured by Vercel Web Analytics without cookies, in aggregate.
If you choose “Accept” in the cookie banner, we also load the Meta Pixel (Meta Platforms Ireland Ltd.) to measure how our Facebook and Instagram ads perform. It records, for example, when you arrive from an ad and then request a quote, sign up or place an order. Meta may also use this data as an independent controller (see Meta’s privacy policy). Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw or change at any time: .
6. Your rights as a data subject
Under the GDPR, you have the following rights:
- the right to information about, and access to, the data processed about you;
- the right to rectification;
- the right to erasure (the “right to be forgotten”);
- the right to restriction of processing;
- the right to data portability;
- the right to object, and the right to withdraw your consent at any time.
You can send your requests to team@trioralab.com; we will respond without undue delay, and in any event within one month.
7. Data security
The Service Provider applies appropriate technical and organizational measures to protect the data (encrypted password storage, encrypted connections, access restrictions).
8. Remedies
You may lodge a complaint about data processing with the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH; 1055 Budapest, Falk Miksa utca 9-11., Hungary; ugyfelszolgalat@naih.hu), and if your rights are violated, you may also go to court.
This policy is updated regularly.