Privacy Policy

Data controller

The controller and operator of the Cetli service is Tank Kft.

Company name

Tank Kft.

Registered office

Mátyás király utca 102, 2083 Solymár, Hungary

Company registration number

13-09-203062

Registration court

Budapest Környéki Törvényszék Cégbírósága (Company Court of the Budapest Environs Regional Court)

Tax number

27273924-2-13

EU VAT number

HU27273924

Privacy contact

info@cetli.net

Data we process

• Account data: name, email address, language, authentication data, and profile image.
• Workspace data: memberships, departments, roles, permissions, and settings.
• User content: tasks, comments, files, images, news, knowledge documents, and related history.
• Technical data: IP address, browser and device information, session and security logs.
• Billing data: personal or company name, address, tax number, subscription, and payment events. Cetli does not store full card details.

Sign in with Google

When you choose “Continue with Google,” we receive the persistent account identifier, verified email address, name and, when available, profile image reference provided by Google. We use these only to create, link, and securely authenticate your Cetli account.

We never see or store your Google password. Signing in does not give Cetli access to Gmail, Google Drive, Google Calendar, or other Google content.

Purposes and legal bases

• Providing the service and workspace features: performance of a contract.
• Account and system security and fraud prevention: legitimate interests.
• Invoicing, accounting, and regulatory duties: legal obligation.
• Optional notifications and consent-based functions: consent, which can be withdrawn at any time.
• Customer support: performance of a contract or legitimate interests.

Processors and transfers

We use carefully selected providers to operate the service, including DigitalOcean for infrastructure, DeepSeek for the optional AI feature, Mailjet for email delivery, Stripe for card payments, Számlázz.hu for invoicing, and Google for optional authentication and, with consent, Google Analytics measurement.

We share only the data necessary for each provider's task. For transfers outside the EEA, we rely on safeguards required by applicable law, such as an adequacy decision or standard contractual clauses.

Optional AI feature

A workspace admin may enable AI. Task and recurring drafting, editing, or decomposition sends the user instruction and necessary permission-filtered task, people, and department context to the DeepSeek Open Platform. Ask Cetli receives the question and bounded excerpts from accessible app areas, tasks, and published knowledge documents. Writing assistance normally receives only form text and the selected action; for a task comment, the user may separately enable use of the accessible task description and a bounded number of previous comments. A task AI summary receives the accessible task status, description, checklist, and a bounded number of comments. We do not send passwords, authentication tokens, database identifiers, files, task history, linked knowledge content, or inaccessible workspace content.

The purpose is to produce the requested draft, summary, analysis, or sourced answer. AI never creates or edits business data automatically: the user reviews, may adjust, and separately confirms the result. DeepSeek processes inputs and outputs under its own terms and states that service data may be processed and stored on servers in the People's Republic of China. Further information is available in DeepSeek's Open Platform Terms and Privacy Policy.

Do not enter personal data, sensitive data, trade secrets, or other confidential information that is unnecessary for the task. A workspace admin may disable AI at any time.

Retention

Account and workspace data are retained while the service relationship exists or until a valid deletion request is completed. A workspace admin may enable automatic deletion of old attachments; automatic file deletion is disabled by default. This workspace retention setting does not apply to profile images.

Billing and accounting records are kept for the period required by law, while security logs are kept only as long as proportionate for investigating abuse. Data may remain in restricted backups for a limited period after deletion.

Cookies, analytics, and local storage

Cetli uses necessary technologies to operate the site and remember visitor preferences. The statistics and marketing categories are disabled by default and can be enabled separately. No marketing tracker or advertising service is currently connected to the marketing category.

Cetli uses Google Analytics cookies only after the statistics category has been enabled on the public Hungarian and English landing pages and on the app.cetli.net sign-in and registration pages. Measurement may record page views, clicks on the landing-page registration button, and successful sign-in and registration. We do not send form values, names, email addresses, workspace or task identifiers, or in-app activity to Google Analytics. Advertising storage and personalized-ad signals remain disabled.

We remember category-level choices in necessary consent cookies valid for one year across cetli.net subdomains so the landing and authentication pages respect the same choice. Choices can be changed at any time through “Settings”; after statistics consent is withdrawn, Cetli attempts to remove Google Analytics cookies available on its own domain. We also remember the selected light or dark appearance in a necessary cookie valid for one year across cetli.net subdomains and in browser local storage so the landing page and application have a consistent appearance. The application may use secure cookies required for authentication and browser local storage for convenience settings such as language or view preferences.

Your rights

You may request access, correction, erasure, or restriction of your personal data; object to processing based on legitimate interests; request data portability; and withdraw consent.

Send requests to info@cetli.net. You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information or your local supervisory authority, and seek a judicial remedy.

Security

We use access controls, encrypted connections, short-lived access tokens, revocable sessions, logging, and workspace-level permission boundaries. No internet service can guarantee absolute security; we document incidents and notify affected people and authorities when required.

Changes to this policy

We may update this policy as the service or legal requirements change. We will announce material changes in the app or by email, and the effective date will always be shown at the top of this page.