Privacy
Last updated 11 September 2026.
Who is responsible
The controller is ⟨KFT_NAME⟩, registered seat ⟨KFT_SEAT⟩, company registration number ⟨KFT_REGISTRATION_NUMBER⟩ (⟨KFT_REGISTRY_COURT⟩), tax number ⟨KFT_TAX_NUMBER⟩. We operate FirstLine. You can reach us at ⟨KFT_EMAIL⟩.
What we process, and why
- When you request an Enquiry Teardown: the website address and email address you enter, whether you ticked the box for occasional notes, and your browser’s user-agent string. We use them to produce the readout and send you the link. Legal basis: steps taken at your request before any contract (GDPR Article 6(1)(b)).
- To prevent abuse: your IP address, which we store only as a salted one-way hash, and the number of requests made from it, from your email address and for each website. Legal basis: our legitimate interest in keeping the free service available (Article 6(1)(f)).
- Occasional notes: only if you tick the box. Legal basis: your consent (Article 6(1)(a)) and, for commercial email, section 6 of Hungarian Act XLVIII of 2008 on commercial advertising. You can withdraw consent at any time through the link in every email or by writing to us; withdrawal doesn’t affect what came before it.
- If you write to our intake agent: your messages, their language and time, and what you tell us about your clinic. We use them to answer you, and a person at FirstLine reads any reply the agent holds for review. Legal basis: Article 6(1)(b), and our legitimate interest in answering business enquiries (Article 6(1)(f)).
- If you book a diagnostic call: your name, email address, clinic and the time you choose. Legal basis: Article 6(1)(b).
- When you visit the site: our hosting provider records technical request logs (IP address, time, address requested, browser) for security and to keep the site running. Legal basis: Article 6(1)(f).
Pages we read for a teardown
When you request a teardown, we fetch public pages of the website you name. Those pages can contain personal data, such as the names and photographs of a clinic’s dentists. We keep text extracts of the pages for up to 30 days to produce and check the readout, and then delete them. The readout itself holds codes, page addresses and short quotes, not the pages. Legal basis: the legitimate interest, yours and ours, in analysing a business’s public website (Article 6(1)(f)).
Who processes data for us
Each of these processors works for us under a data processing agreement:
- Vercel Inc., United States: hosting. The site’s functions run in Frankfurt, Germany.
- Neon, United States: database. Data is stored in Frankfurt, Germany (AWS eu-central-1).
- Anthropic, PBC, United States: the AI model that reads fetched pages and drafts the intake agent’s replies.
- Resend, United States: sending email.
- Cal.com, United States: booking diagnostic calls.
Where personal data leaves the European Economic Area, the transfer relies on the EU–US Data Privacy Framework for certified recipients, or otherwise on the European Commission’s standard contractual clauses.
How long we keep it
- Teardown requests and readouts: 12 months.
- Text extracts of fetched pages: up to 30 days.
- Salted IP hashes and request counts: 30 days.
- Your email address for occasional notes: until you unsubscribe.
- Conversations with the intake agent and call bookings: 12 months after the last message, unless we go on to work together.
- If we work together: invoices and the records behind them for 8 years, as Hungarian accounting law requires (Act C of 2000, section 169).
- Hosting request logs: for the few days our hosting provider keeps them.
Cookies
This site sets one cookie, NEXT_LOCALE, to remember the language you choose. It is needed for the site to work the way you asked, so it needs no consent. We don’t use analytics or advertising cookies. If that ever changes, we’ll ask first.
Your rights
You can ask us for access to your personal data, and to correct, erase or restrict it; you can ask to receive it in a portable format; and you can object to processing based on our legitimate interest. Where processing relies on your consent, you can withdraw it at any time. Write to ⟨KFT_EMAIL⟩; we answer within one month.
You can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9–11.; postal address 1363 Budapest, Pf. 9.; ugyfelszolgalat@naih.hu; www.naih.hu. You can also go to court; in Hungary, the regional court (törvényszék) for your place of residence has jurisdiction.
Automated decisions
The teardown analyses a website, not a person. We make no decisions about you based solely on automated processing.
Changes
We date every version of this notice. If we change what we process or why, we update this page before the change takes effect.