Privacy Notice

Effective from: 2026-08-31

This notice explains what personal data we process when you use MeseNeked, why, for how long, and what rights you have. If anything is unclear, write to privacy@sagavu.com.

1. Fox support and saved conversations

Signed-in chat messages, account ID, page path, timestamps, case states and agent replies are stored in an AWS database to provide support and track the case. Anthropic processes the message history to produce AI replies. Authorized agents can review conversations and related subscription, invoice and token records; the AI cannot access those account records. Chat is not used for advertising. Do not enter passwords, card details or children’s personal data. Using static guides alone does not create a saved conversation. Starting a new conversation does not erase earlier server records; request data export or erasure through account privacy options. Ordinary support history remains until account deletion. Consumer complaints and substantive responses are retained for at least 3 years under section 17/A(7) of the Hungarian Consumer Protection Act, including after account deletion (GDPR Articles 6(1)(c) and 17(3)(b)). A later substantive agent response or delivery record extends this minimum; open complaints remain retained until handled. Scheduled cleanup removes expired, completed complaint records.

2. Who processes your data?

Data controller

SoundCam Productions Kft.

Registered seat

2364 Ócsa, Üllői utca 48.

Company reg. number

13-09-211186

Registry: Budapest Környéki Törvényszék Cégbírósága

Tax number

13580100-2-13

Contact

legal@sagavu.com

Data protection officer

We do not fall under the mandatory appointment rule in GDPR Art. 37, so no data protection officer has been appointed. Use the contact address above for data protection matters.

3. What data we process, and where it comes from

CategoryWhat it coversSource

Account data

Email address, display name. We never see your password — Amazon Cognito stores it encrypted.

From you

Google sign-in data

Email address and its verified status, if you sign in with Google.

From Google (GDPR Art. 14)

Content you provide

Prompts, screenplays, uploaded images, audio and video, project settings. If these contain data about real people (name, likeness, voice sample), we process that too.

From you

Generated content

The images, videos, audio and text produced, and their metadata.

Created by the service

Billing data

Name, billing address, tax number (if provided), purchase amount and date. We never store or see card details — Stripe handles those.

From you / from Stripe

Usage data

Credit transactions, generation history, API key usage (last used, IP address), server-side operational logs.

Automatically, during use

We do not seek to process special categories of data (GDPR Art. 9). Please do not upload material containing health, religious, political or other special category data.

4. Why we process it, and on what legal basis

PurposeLegal basis (GDPR Art. 6(1))Note

Account management, providing the service, content generation

(b) performance of a contract

The service cannot be provided without it.

Invoicing, accounting, tax obligations

(c) legal obligation

Hungarian Accounting Act s.169, VAT Act.

Abuse prevention, operational security, debugging

(f) legitimate interests

You may object — see section 9.

Non-essential storage on your device

(a) consent

Withdrawable at any time (section 7).

What if you do not provide the data? An email address and password are required to create an account. Billing details are required for paid plans. Uploading content is voluntary.

5. Who we share your data with

We use processors to operate the service. Data is sent only to the category of recipient needed to provide the feature you select. We do not sell your data or use it for advertising.

Recipient categoryPurposeData involvedProcessing region

Cloud, storage and authentication providers

Account management, databases, file storage and sign-in

Account data, projects, uploaded and generated content

Primarily EU; some supporting operations in the USA

Payment and invoicing providers

Payments, subscriptions and statutory invoicing

Contact, purchase and invoicing data; we do not see card details

EU / USA

Generative AI and speech providers

Providing the text, image, video or speech feature you select

The required prompt or story text; photos and voice samples only when you select such a feature

EU / USA

GPU infrastructure providers

Running generative models that we operate ourselves

The text, image or audio input needed to perform the task

EU / USA according to the active infrastructure configuration

We may also disclose data to authorities where required by law.

6. Transfers outside the EU

Your data is primarily stored inside the European Union (Amazon Web Services, eu-central-1, Frankfurt). Content generation, however, also transfers data to the providers marked "third country" above.

  • United States: the providers concerned are covered by the EU–US Data Privacy Framework (GDPR Art. 45), or the transfer relies on the European Commission's Standard Contractual Clauses (GDPR Art. 46(2)(c)).

7. How long we keep it

CategoryRetention period

Account data (email address, profile)

Until the account is deleted

Projects, screenplays, generated image and video content

Until the account is deleted, or until the user deletes them

Credit transactions

Until the account is deleted

Issued invoices

8 years (Hungarian Accounting Act — retained even after account deletion)

Server-side operational logs

30 days

Deleting your account also deletes your projects, generated content and stored files. Issued invoices must be retained regardless — Hungarian accounting law requires it, and GDPR Art. 17(3)(b) expressly permits it.

8. Cookies and local storage

We currently use strictly necessary cookies and local storage only — no analytics, advertising or tracking services, and no third-party trackers. You can revisit your choice any time via "Cookie settings" at the bottom of the page.

NameTypePurposeDurationNecessary?

sagavu-support-thread

sessionStorage

ID of the open support conversation (the transcript stays on the server)

Until the tab session ends or a new conversation is started

yes

CognitoIdentityServiceProvider.*

cookie

Maintains the signed-in session (Amazon Cognito)

Until the session ends or the token expires

yes

NEXT_LOCALE

cookie

Remembers the selected language (Hungarian / English)

1 year

yes

meseneked-color-scheme

local storage

Remembers the light / dark theme preference

Until deleted

yes

meseneked-cookie-consent

local storage

Stores your cookie decision (without it we would ask on every visit)

Until withdrawn

yes

wizardData, currentStoryProjectId, studioResult*, pending*

local storage

Preserves in-progress work (wizard state, selected project, studio view) across page reloads

Until deleted

yes

meseneked.onboarding.*, research.insights

local storage

Onboarding walkthrough state and research panel settings

Until deleted

yes

9. Automated decision-making and AI-generated content

We do not make decisions producing legal effects concerning you based solely on automated processing, and we do not carry out profiling (GDPR Art. 22).

The service generates content using artificial intelligence, and outputs carry a machine-readable marking (IPTC "trainedAlgorithmicMedia"). Generated material is artificially created, not a real recording — even where it looks convincing. If you publish content depicting real people, a separate disclosure duty may apply to you under AI Act Art. 50; see the Terms of Service.

10. Your rights

RightWhat it means and how to use it

Access (Art. 15)

Download everything instantly via Settings → Download my data.

Rectification (Art. 16)

Edit your profile on the Settings page.

Erasure (Art. 17)

Use Settings → Delete account. This also removes your projects, generated content and stored files. Exception: issued invoices (section 6).

Restriction (Art. 18)

You may ask us to suspend processing while a dispute is resolved.

Portability (Art. 20)

The export is machine-readable JSON.

Objection (Art. 21)

You may object to processing based on legitimate interests.

Withdrawing consent (Art. 7(3))

Cookie consent can be withdrawn at any time from the page footer. Withdrawal does not affect the lawfulness of prior processing.

For anything beyond the self-service tools, write to privacy@sagavu.com. We respond within one month at the latest, extendable by two months where justified. There is no charge.

11. Children

The service is intended for people aged 16 and over. We do not knowingly collect data from anyone under 16, and delete it if we become aware of it.

12. Security

  • Traffic is carried over encrypted connections (TLS).
  • Access to stored files is segregated per user; download links are time-limited.
  • Passwords are handled by Amazon Cognito; we never see them.
  • Two-factor authentication (TOTP) is available — we recommend enabling it.
  • In the event of a personal data breach we follow GDPR Art. 33–34: the authority is notified within 72 hours, and you are informed where the breach poses a high risk to you.

13. Changes to this notice

We update this notice from time to time — for example when a new processor is engaged. The effective date is shown at the top. We notify you in advance, in-product or by email, of material changes.

14. Remedies

You can raise a complaint with us first at privacy@sagavu.com. Independently of that, you may lodge a complaint with the supervisory authority:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)

1055 Budapest, Falk Miksa utca 9-11. · https://naih.hu · ugyfelszolgalat@naih.hu

You may also go to court, including before the court with jurisdiction over your place of residence.