Data protection notice

1. Controller

The controller responsible for your personal data is Juniper Solutions Kft.

Registered seat: 1053 Budapest, Ferenciek tere 2. Fsz., Hungary. Company registration number: 01-09-450700, Company Court of the Budapest-Capital Regional Court. Tax number: 32942880-1-41. EU VAT number: HU32942880.

Email for all data protection questions and requests: boroka.papay@junipersolutions.eu.

2. Data we process

Account data: your name, work email address and a hashed password (we never store the password itself), and your company details for invoicing (company name, VAT or tax number and billing address).

Request data: what you enter in a brief (number of people, dates, budget, company website, description of the event), the options you choose, and the status and results of your request, including offers from venues.

Concierge chat: the messages you send to the chat assistant and its answers.

Payment data: Stripe processes your card details. We receive only the payment status and a reference to it, and we keep invoices.

Communication with venues: the emails we send on your behalf and the replies. These contain your request details but not your name, email address or phone number: towards venues you are "our client".

Technical data: your IP address and similar data for security and abuse protection, and the cookies described below.

Venue data: business names and business contact details of venues, taken from public sources such as Google Maps listings and the venues' own websites.

Usage data, only if you agree to analytics: the pages you visit on Locisyn, your approximate location (country or city), device and browser type, and a random identifier set in a cookie, collected by Google Analytics. We do not link it to your account and we do not turn on advertising features.

Records of changes: when you or our team change something in the service (for example you save your company details or place a request, or our team approves an email on your behalf), we record who did it, when, what it concerned and the new and previous values. The database also keeps a history of its changes, so that we can restore information and analyse the service.

3. Why we process it and on which basis

To provide the service you ask for, which includes your account, your requests, the contact with venues and the payment (Article 6(1)(b) GDPR, contract).

To keep the service secure, prevent abuse and fraud, answer questions, improve the service, to keep records of changes so that information can be restored and our own actions can be traced, and to contact venues for our customers' requests (Article 6(1)(f), our legitimate interests; you may object, see section 9).

To keep invoices and accounting records (Article 6(1)(c), legal obligation).

To measure how the site is used and to improve it with Google Analytics, only if you agree (Article 6(1)(a) GDPR, consent). You can withdraw your consent at any time under “Cookie settings” at the bottom of every page; this does not affect what was done before.

4. Artificial intelligence

Software agents based on large language models read your brief and the public website you give us, rank options, answer your questions and draft the emails to venues. Their answers are checked by rules in our software before anything is sent, and our team can step in. No decision with legal or similarly significant effect on you is taken solely by automated means.

We use Google Cloud and its AI service for this. The models can process requests outside the EU.

A separate software agent reviews, once a day, the records of the last 24 hours (your requests, chat messages and the emails with venues, linked to a random identifier instead of your name or email address) to check that our agents and the service work correctly. It only reports problems to our team and takes no decision about you.

5. Who receives data

Service providers that process data for us: Google Cloud (hosting in Belgium, database, AI models, reCAPTCHA spam protection, analytics copies), Google Analytics (visit statistics, only with your consent; Google Ireland Limited and Google LLC), Stripe (payments), Resend (email delivery and receipt) and Apify (collection of public venue listings; it receives no customer data).

Venues receive the details of the request needed for a quote (type of event, number of people, dates, budget and wishes). We do not pass them your name or contact details.

Authorities, courts and advisers, where the law requires or to establish or defend legal claims.

6. Transfers outside the EU

Some providers, such as Stripe, Resend and Google, can process data in the United States or other countries. We rely on safeguards required by the GDPR, such as the EU-US Data Privacy Framework or standard contractual clauses.

7. How long we keep data

Account and request data: while your account exists, and afterwards only as long as needed for the purposes above or deletion is possible. You can ask us to delete your account.

Invoices and payment records: eight years, as Hungarian accounting law requires.

Technical and security logs: a short period, then they are deleted or anonymised.

Venue business contact data: while it is publicly available and useful for requests, until the venue asks us to remove it.

Analytics data: kept in Google Analytics for the shortest period it offers for detailed data (two months), after which only aggregated statistics remain.

Records of changes and the history of changes in the database: for as long as they are needed to restore information and to trace changes. Access is limited to a few authorised people, and we review regularly whether they are still needed.

8. Cookies

Necessary cookies need no consent: a login cookie that keeps you signed in, a cookie that remembers your language, and a cookie that remembers your cookie choice. We use no advertising cookies.

Analytics cookies (Google Analytics, named _ga and _ga_ followed by an identifier) are set only if you choose “Accept analytics” in the cookie notice. Until then Google Analytics is not loaded at all. You can change your choice at any time under “Cookie settings”; withdrawing it deletes the analytics cookies and stops the measurement.

Our landing page loads Google reCAPTCHA and the payment page loads Stripe. They run in your browser to protect against abuse and fraud and can process technical data under their own terms.

9. Your rights

You can ask for access to your data, correction, deletion, restriction of processing and a copy in a common format. You can object to processing based on our legitimate interests, and withdraw any consent you gave. Write to boroka.papay@junipersolutions.eu; we answer within one month.

If you think we handle your data unlawfully, you can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9-11, naih.hu), or go to court.

10. Venues and their contact persons

If you work for a venue we contacted: we wrote to your published business address to ask for a quote for a customer. We keep your reply and your business contact details to deal with that request. You can ask us to stop writing to you or to delete your data at boroka.papay@junipersolutions.eu. If you ask us to stop writing, or if an email to you bounces or is reported as spam, we put your address on a list so that we do not write to you again.

11. Security

Data is encrypted in transit, passwords are stored only as hashes, access is limited to the people and systems that need it, and secrets are kept in a dedicated secret store.

12. Changes

We update this notice when the service or the law changes. The date at the top shows the current version.