Privacy Policy
Under Regulation (EU) 2016/679 (GDPR) · In effect from: 18 August 2026
Informational translation. MűLeÍr is operated by a Hungarian business and this agreement is governed by Hungarian law. This English text is provided for convenience only — in case of any discrepancy, the Hungarian version is the legally binding one.
1. The data controller
We are not required to appoint a data protection officer.
2.Categories of data processed
| Type of data | Purpose | Retention |
|---|---|---|
| E-mail address | Sign-in, identification, notifications | Until the account is deleted |
| Uploaded drawings (PDF) | Data extraction, report generation | Until the project is deleted |
| Extracted drawing and calculation data | Producing the report and cost breakdown | Until the project is deleted |
| Company details (name, address, tax number, phone) | Filling in the quote header | Until the account is deleted |
| Contact message (name, e-mail, message) | Answering your enquiry | After the enquiry is closed |
| IP address | Abuse prevention, rate limiting | Only as long as needed for the limit |
| Payment identifiers (Stripe) | Identifying the transaction | 8 years (accounting obligation) |
3.Purpose and legal basis
- Performance of a contract (GDPR Art. 6(1)(b)): sign-in, report generation, payment processing.
- Legal obligation (GDPR Art. 6(1)(c)): retention of accounting records.
- Legitimate interest (GDPR Art. 6(1)(f)): abuse prevention, security and availability of the service.
4.Retention and deletion
We keep uploaded drawings and the data extracted from them for as long as the corresponding project exists. When the project is deleted (Dashboard → delete project), the related data and the uploaded PDF files are removed from storage as well.
You can request deletion of your account or your data at any time at info@muleir.com. Data connected to accounting records must be kept until the statutory retention period expires; those can only be deleted afterwards.
5.Processors
| Provider | Task | Location |
|---|---|---|
| Supabase, Inc. | Database and file storage (EU region) | EU / USA |
| Stripe, Inc. | Payment processing | USA |
| Vercel Inc. | Hosting and runtime environment | USA |
| Anthropic PBC | Automated processing of drawings (data extraction) | USA |
| Cloudflare, Inc. | Bot protection (Turnstile), where used – IP address forwarding | USA |
| Google LLC | Delivery of contact messages (Gmail SMTP) | USA |
| Google Ireland Ltd. / Google LLC | Advertising and conversion measurement (Google Ads) – only with cookie consent | EU / USA |
Data is stored primarily within the European Union (Supabase — Frankfurt region). Transfers to a third country (USA) take place under the EU–US Data Privacy Framework (DPF) or standard contractual clauses.
6.Automated processing
Data is extracted from the uploaded drawings by automated (AI-based) processing. This processing does not produce an automated decision with legal effect concerning you: you review and edit the result before finalising the report.
7.Your rights
- Access: information about the data we process
- Rectification: correction of inaccurate data
- Erasure: deletion of your data (“right to be forgotten”)
- Restriction: requesting restriction of processing
- Portability: your data in a machine-readable format
- Objection: against processing based on legitimate interest
Send your request to info@muleir.com. Response time: no more than 30 days.
8.Remedies – NAIH
If you believe your data is being processed unlawfully, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), or take the matter to court.
- Website: naih.hu
- Phone: +36 1 391 1400
- Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Last updated: 25 August 2026