Privacy Policy & Terms of Sale

Who we are (data controller)

The data controller is Gergely Gombás, sole proprietor (egyéni vállalkozó), 1067 Budapest, Eötvös utca 24., Hungary (registration number 62764164, tax number 92342554-1-42), operating AI Compliance Lab and the "EU AI Act Governance Cockpit" product at aicompliancelab.eu. For any privacy or data question, contact privacy@aicompliancelab.eu.

What data we process, why, and on what legal basis

• Website visits. Cloudflare Web Analytics counts page views in aggregate. It is cookieless and does not track or fingerprint individual visitors (Cloudflare's Web Analytics privacy approach). Our host, Netlify, processes technical request data (such as IP address and browser type) to deliver the site and keep it secure. Legal basis: our legitimate interest in running a secure, working website (GDPR Article 6(1)(f)).
• Risk Tier Quiz email. If you enter your email address after the quiz, we store it together with your quiz result to send you that result and the matching checklist. Legal basis: your consent (Article 6(1)(a)). We keep it until you withdraw consent or ask us to delete it.
• AI Act updates. Only if you tick the separate, optional box on the quiz form, we also email you occasional AI Act updates. Legal basis: your separate consent (Article 6(1)(a)). Every email has an unsubscribe option, and we delete your address from the list when you unsubscribe.
• Purchases. Your name, email address, billing details and payment method are collected and processed by our payment processor, Stripe. We receive your name, email address and purchased product from Stripe after a successful payment, to deliver your order and identify it if you contact support. Legal basis: performance of the contract (Article 6(1)(b)).
• Invoicing and accounting. Order and invoice records are kept for 8 years, as required by the Hungarian Accounting Act (Act C of 2000, Section 169). Legal basis: legal obligation (Article 6(1)(c)).
• Support requests. When you email us, we use your email address and message to answer you. Legal basis: performance of the contract or, for general questions, our legitimate interest in answering you (Article 6(1)(b) and (f)). We keep this correspondence for up to 5 years after the last contact, the general limitation period under the Hungarian Civil Code (Section 6:22).
• Theme preference. If you switch between light and dark mode, your choice is saved in your own browser (localStorage key "acl-theme"). It never leaves your device, and it is not a cookie.

We do not sell your data, we do not use advertising scripts, and we do not use your data for marketing unless you separately opt in.

Processors and recipients

• Stripe: payment processing. See Stripe's Privacy Policy.
• Netlify, Inc. (USA): website hosting, and storage of the Risk Tier Quiz form submissions (Netlify Forms). See Netlify's Privacy Policy.
• Cloudflare, Inc. (USA): cookieless web analytics, aggregate visit counts only. See Cloudflare's Web Analytics privacy approach.
• Migadu-Mail GmbH (Switzerland): hosting of our business email addresses (hello@, support@, privacy@).
• Notion Labs, Inc. (USA): product delivery. You duplicate the workspace into your own Notion account, and Notion's own privacy policy governs your use of Notion itself.

Stripe, Netlify, Cloudflare and Notion are US-based or US-owned providers, so your data may be transferred outside the EU/EEA. These transfers rely on the EU-US Data Privacy Framework or on Standard Contractual Clauses. Switzerland, where Migadu stores email, is covered by an EU adequacy decision.

Your rights (GDPR)

You have the right to access, correct, export or delete your personal data, to restrict or object to certain processing, and to withdraw any consent at any time without affecting processing done before the withdrawal. To exercise any of these rights, email privacy@aicompliancelab.eu. We respond within one month; in complex cases this can be extended by two further months, and we will tell you if it is. If you think we handle your data unlawfully, you can complain to the Hungarian data protection authority, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH, 1055 Budapest, Falk Miksa utca 9-11., ugyfelszolgalat@naih.hu, www.naih.hu), to the supervisory authority of your own EU country, or go to court.

Terms of sale

• Seller. Gergely Gombás, sole proprietor (egyéni vállalkozó), 1067 Budapest, Eötvös utca 24., Hungary, registration number 62764164, tax number 92342554-1-42. Contact: support@aicompliancelab.eu.
• Products. All products are digital content, delivered as a link to duplicate a Notion workspace and, for the Full Automation Suite and Agency tiers, an n8n workflow file. The product contents per tier are described on the pricing section of the main site.
• How the contract is made. You choose a tier, accept these terms, and pay on the Stripe checkout page, where you can review and correct your details before paying. The contract is concluded when your payment succeeds. It is concluded electronically in English and is not filed by us as a separate written document.
• Prices and VAT. Prices are in EUR and are final amounts. No VAT is charged: the seller operates under the Hungarian small-business VAT exemption (alanyi adómentesség).
• Right of withdrawal. If you buy as a consumer, you would normally have 14 days to withdraw from a distance contract. Because the product is digital content delivered immediately, you expressly request immediate delivery at checkout and acknowledge that you lose the right of withdrawal once delivery has started (Article 16(m) of Directive 2011/83/EU; Section 29(1)(m) of Hungarian Government Decree 45/2014).
• Guarantee. See our Guarantee for the conditions under which we do refund.
• Complaints. Send any complaint to support@aicompliancelab.eu. We answer in writing within 30 days.
• Consumer dispute resolution. If you are a consumer and we cannot resolve your complaint, you can turn to the conciliation body of our seat: Budapesti Békéltető Testület, 1016 Budapest, Krisztina krt. 99., bekelteto.testulet@bkik.hu, bekeltet.bkik.hu. You can also go to court.
• Liability. The product is an operational implementation aid and does not constitute legal advice (see the disclaimer on the main site). To the extent the law allows, our liability for any damage arising from the product is limited to the price you paid. This limit does not apply to damage caused intentionally or by gross negligence, or to harm to life, physical integrity or health.
• Governing law. Hungarian law applies. If you are a consumer, you also keep the protection of the mandatory consumer law of the country where you live.

License terms

• Buying a tier gives you a non-exclusive, perpetual right to use the Notion workspace and, where included, the n8n workflow. It is a license, not a transfer of ownership of the templates.
• Governance Lite and Full Automation Suite: use within your own organization, including adapting the workspace and workflow to your needs.
• Agency / Consultant: everything above, plus commercial use in an unlimited number of client projects, including setting the workspace up for clients and white-labelling or rebranding it for them.
• No tier allows reselling or redistributing the templates themselves as a standalone product, for example on a template marketplace.