# PromptPack.dev — Privacy Policy

**Last updated:** April 10, 2026

## 1. Data Controller

**László Dániel Bence EV** (sole proprietor)
Tax number: 91913502-1-35
Seat: 4600 Kisvárda, Virágh Ferenc utca 92., Hungary
Contact: hello@promptpack.dev

## 2. What Data We Collect

| Data | Purpose | Legal basis (GDPR) | Retention |
|------|---------|-------------------|-----------|
| Email address | Product delivery & support | Art. 6(1)(b) — contract performance | 3 years after purchase (legal obligation), or until deletion request |
| Purchase record (product, date, amount) | Order fulfillment, support, legal accounting obligations | Art. 6(1)(b) contract + Art. 6(1)(c) legal obligation | 8 years (Hungarian accounting law — Szt. 169. §) |

## 3. What We Do NOT Collect

- **Name or address** — not required for digital delivery
- **Payment card details** — handled entirely by LemonSqueezy
- **Cookies requiring consent** — we use no tracking cookies
- **Browsing behavior / personal profiling data** — none

## 4. Payment Processing (LemonSqueezy)

LemonSqueezy (Lemon Squeezy, LLC / Lemon Squeezy International Limited) acts as Merchant of Record and is an **independent data controller** for all payment-related data (name, billing address, card details). Their privacy policy applies to that data: [https://www.lemonsqueezy.com/privacy](https://www.lemonsqueezy.com/privacy)

We receive only your email address and purchase details from LemonSqueezy — nothing more.

## 5. Analytics

We use **privacy-friendly, cookie-free analytics** (Plausible Analytics or Umami). These tools:

- Do not use cookies
- Do not collect personal data
- Do not track individuals across sites
- Process only aggregate, anonymized page view data

**No cookie consent banner is required** because no personal data is processed by our analytics.

## 6. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

- **LemonSqueezy** — as payment processor / MoR (see Section 4)
- **Legal obligation** — if required by Hungarian law or a court order

## 7. International Transfers

LemonSqueezy is a US-based company. Data transfers to the US are covered by LemonSqueezy's own data processing safeguards. We store no personal data outside the EU/EEA ourselves.

## 8. Your Rights (GDPR Articles 15–21)

You have the right to:

- **Access** your personal data (Art. 15)
- **Rectify** inaccurate data (Art. 16)
- **Erase** your data ("right to be forgotten") (Art. 17)
- **Restrict** processing (Art. 18)
- **Data portability** (Art. 20)
- **Object** to processing (Art. 21)

To exercise any right, email **hello@promptpack.dev**. We respond within 30 days.

Note: We cannot delete data that we are legally required to retain (e.g., accounting records for 8 years under Hungarian law).

## 9. Supervisory Authority

If you believe your data protection rights have been violated, you may lodge a complaint with:

**Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)**
Address: 1055 Budapest, Falk Miksa utca 9-11.
Phone: +36 1 391 1400
Email: ugyfelszolgalat@naih.hu
Website: [https://www.naih.hu](https://www.naih.hu)

EU residents may also contact their local data protection authority.

## 10. Changes

We may update this policy at any time. The "Last updated" date at the top reflects the latest revision.

---

**Contact:** hello@promptpack.dev