Legal information
Privacy Policy
This policy explains what personal data Cetli uses, why we need it, who helps us process it, and how you can exercise your rights.
Data controller
The controller and operator of the Cetli service is referred to as “Cetli” in this policy. Contact: info@cetli.net. The invoice issuer's full official details are also provided in contractual and billing documents.
Data we process
- Account data: name, email address, language, authentication data, and profile image.
- Workspace data: memberships, departments, roles, permissions, and settings.
- User content: tasks, comments, files, images, news, knowledge documents, and related history.
- Technical data: IP address, browser and device information, session and security logs.
- Billing data: personal or company name, address, tax number, subscription, and payment events. Cetli does not store full card details.
Sign in with Google
When you choose “Continue with Google,” we receive the persistent account identifier, verified email address, name and, when available, profile image reference provided by Google. We use these only to create, link, and securely authenticate your Cetli account.
We never see or store your Google password. Signing in does not give Cetli access to Gmail, Google Drive, Google Calendar, or other Google content.
Purposes and legal bases
- Providing the service and workspace features: performance of a contract.
- Account and system security and fraud prevention: legitimate interests.
- Invoicing, accounting, and regulatory duties: legal obligation.
- Optional notifications and consent-based functions: consent, which can be withdrawn at any time.
- Customer support: performance of a contract or legitimate interests.
Processors and transfers
We use carefully selected providers to operate the service, including infrastructure and hosting providers, Mailjet for email delivery, Stripe for card payments, Számlázz.hu for invoicing, and Google for optional authentication.
We share only the data necessary for each provider's task. For transfers outside the EEA, we rely on safeguards required by applicable law, such as an adequacy decision or standard contractual clauses.
Retention
Account and workspace data are retained while the service relationship exists or until a valid deletion request is completed. A workspace admin may enable automatic deletion of old attachments; automatic file deletion is disabled by default. This workspace retention setting does not apply to profile images.
Billing and accounting records are kept for the period required by law, while security logs are kept only as long as proportionate for investigating abuse. Data may remain in restricted backups for a limited period after deletion.
Cookies and local storage
The public cetli.net landing page currently does not use advertising or remarketing cookies. The application may use secure cookies required for authentication and browser local storage for convenience settings such as language or view preferences.
Your rights
You may request access, correction, erasure, or restriction of your personal data; object to processing based on legitimate interests; request data portability; and withdraw consent.
Send requests to info@cetli.net. You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information or your local supervisory authority, and seek a judicial remedy.
Security
We use access controls, encrypted connections, short-lived access tokens, revocable sessions, logging, and workspace-level permission boundaries. No internet service can guarantee absolute security; we document incidents and notify affected people and authorities when required.
Changes to this policy
We may update this policy as the service or legal requirements change. We will announce material changes in the app or by email, and the effective date will always be shown at the top of this page.