Privacy Policy

Last updated: 2026-02-25

This Privacy Policy describes how ThreadMage ("we", "Data Controller") collects, processes, and protects your personal data when you use the threadmage.ai website and the ThreadMage AI service (the "Service").

1. Data Controller Information

Company name: „KELET-AGRO” Kereskedelmi és Szolgáltató Korlátolt Felelősségű Társaság Short name: Kelet-Agro Kft. Registered address: Tokaji u 4. B., 4400 Nyíregyháza, Hungary Company registration number: Cg.15-09-066786 Tax number: 12614961-2-15 Legal representative: László Tamás, Managing Director Contact email: [email protected] Data Protection Officer (DPO): László Tamás DPO email: [email protected]

2. Data We Collect

We collect the following personal data when you use the Service: • Contact data: name, email address, phone number (if provided) • Account data: email address, encrypted password, registration date • Technical data: IP address, browser type, OS, pages visited, cookies • Chat data: conversations with the chatbot (in anonymous and identified form) • Billing data: company name, billing address, tax number (for paying subscribers)

3. Purpose and Legal Basis for Processing

We process data for the following purposes and legal bases: • Contract performance (GDPR Art. 6(1)(b)): service delivery, account management, billing • Legitimate interest (GDPR Art. 6(1)(f)): fraud prevention, system security, improving customer service • Consent (GDPR Art. 6(1)(a)): marketing communication, analytical cookies • Legal obligation (GDPR Art. 6(1)(c)): accounting and tax compliance

4. Data Retention

• Account data: until account deletion, then 30 additional days • Chat logs: 90 days • Billing data: 8 years (accounting law requirements) • Technical logs: 90 days • Marketing consent: until withdrawal

5. Data Sharing with Third Parties

We share data only with the following categories of partners: • Cloud providers: server infrastructure (EU-based data centers) • Payment processors: secure transaction processing • Analytics tools: anonymized user experience analysis • Email service providers: transactional email delivery We do not sell personal data to third parties and do not transfer data outside the EU without appropriate safeguards.

6. Your Rights under GDPR

Under the EU General Data Protection Regulation, you have the right to: • Access: request information about processed data • Rectification: correct inaccurate data • Erasure: "right to be forgotten" – request data deletion • Restriction of processing • Data portability: receive your data in machine-readable format • Object: to processing based on legitimate interest • Not to be subject to automated decision-making Exercise your rights at: [email protected] For complaints, you may contact your local data protection authority.

7. California Consumer Privacy Act (CCPA)

If you are a California resident, you have the following rights under the CCPA: • Right to know about personal information collected • Right to delete personal information • Right to opt-out of the sale of personal information (we do not sell data) • Right to non-discrimination CCPA requests: [email protected]

8. Data Security

We protect data using industry-standard security measures: TLS encryption, encrypted databases, access controls, and regular security audits. In the event of a data breach, we will notify affected individuals and authorities within the timeframe required by GDPR.

9. Cookie Policy

For detailed information about cookies, please see our Cookie Policy./cookie-policy

10. Changes

We reserve the right to update this Privacy Policy. We will notify subscribers of material changes by email. The date of the last update is always shown at the top of this document.