Data Processing Terms

These terms are part of the Terms of Service. They apply when an application you built and published with Fulta handles personal data, such as form submissions, user accounts, bookings, orders, uploaded files or emails. In that case you are the controller and Fulta Technologies Kft. is your processor.

1. The processing

• Subject and purpose: running your application, storing its data, delivering its email and keeping backups, on your instructions.
• Duration: while the project exists; after deletion as in section 7.
• Data subjects: your application's visitors, users and customers.
• Data: whatever your application collects, typically names, email addresses, messages, booking and order details, uploaded files, IP addresses.

2. Instructions

We handle the data only on your instructions. Instructions are how you build and configure the application in the product, and your written requests. If we think an instruction breaks the law, we tell you. We do not use the data for our own purposes, and do not train AI models with it.

3. Confidentiality and security

Only people who need the data to run the service can access it, and they are bound by confidentiality. Our security measures:

• HTTPS on every connection;
• passwordless sign-in; admin access only with a passkey;
• application secrets stored encrypted;
• each application in its own runtime and its own database, on a domain separate from the platform;
• an audit log of critical operations;
• continuous operational monitoring with alerts.

4. Sub-processors

You give general authorisation for the sub-processors below. We tell you before any change; if you object on data protection grounds, you may terminate the contract.

Transfers to the USA rely on the EU–US Data Privacy Framework (where the provider is certified) or on the European Commission's standard contractual clauses. We bind our sub-processors to the same data protection obligations.

5. Help with requests and your obligations

You can view, manage and delete form submissions, users and orders in your application's settings. If a data subject contacts us, we pass the request on to you. On request we help with security, impact assessments and dealings with the authority.

6. Personal data breaches

If we become aware of a breach affecting your application's data, we notify you without undue delay at your account's email address, with all the information you need for your own notification.

7. At the end of the service

When a project is deleted, the application's database, files and settings are deleted at once and the rest of its data within 10 days. If you ask beforehand at [email protected], we provide a machine-readable export of the data within one month. Data is removed from backups as the backups rotate.

8. Audits

On request we provide the information needed to show compliance with these terms, and allow audits arranged in advance.

Contact: [email protected]