Privacy policy

How MORGENS Design Kft. handles personal data on the roomlytics.ai website and in the Roomlytics service.

1. Data controller

MORGENS Design Kft. (registered office: 8800 Nagykanizsa, Magyar utca 79., Hungary; company reg. no.: 20-09-072782; tax no.: 23964710-2-20) — the "Controller". Privacy contact: hello@roomlytics.ai, +36 70 642 0833.

2. What data we process and why

Demo request (form): name, work email address, hotel name. Purpose: scheduling the requested demo and related contact, including an automatic confirmation email. Legal basis: steps taken at the data subject's request prior to entering into a contract (Art. 6(1)(b) GDPR) and voluntary consent (Art. 6(1)(a)).

Technical data: server security logs and abuse protection (rate limiting) may record the IP address and technical browser characteristics. Legal basis: the Controller's legitimate interest in operating the service securely (Art. 6(1)(f)).

3. Spam protection and third parties

The form is protected by Cloudflare, Inc.'s "Turnstile" service, which processes the IP address and certain browser characteristics. Web fonts are served by Google Fonts; loading them transmits the browser's IP address to Google. Email delivery is performed by a contracted SMTP provider and hosting by a contracted hosting provider — these act as the Controller's processors.

4. Cookies

The public website uses no tracking or marketing cookies and currently runs no visitor analytics. The admin interface uses a technically necessary session cookie for login. If analytics are introduced in the future, this policy will be updated accordingly.

5. Retention

Demo-request data is kept until the enquiry is concluded or the data subject requests deletion; technical logs are deleted on a short rolling basis. You may request deletion at any time at hello@roomlytics.ai.

6. Your rights

Under the GDPR you may request access to, rectification or erasure of your personal data, restriction of processing, object to processing, exercise data portability, and withdraw consent at any time. We respond to requests within 30 days at the latest.

7. Remedies

You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH — 1055 Budapest, Falk Miksa utca 9–11.; www.naih.hu), or bring the matter before a court.

8. Google user data (Google Ads, Google Analytics)

With the hotel's explicit permission (OAuth consent), the Roomlytics service accesses the hotel's Google Ads and Google Analytics 4 account data with read-only scopes (campaign, spend, traffic and conversion metrics). We use this data solely to provide and improve Roomlytics' reporting and analytics functionality for the hotel concerned.

Roomlytics' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use this data for advertising targeting, do not sell it to data brokers, do not use it to determine creditworthiness, and do not build databases from it unrelated to the operation of the service. We do not use Google user data to develop, improve, or train generalized (non-personalized) AI and/or ML models.

Data obtained from Google accounts is processed on servers located in the European Union, over encrypted connections (TLS), with role-based access restricted to those who need it to provide the service. We do not share it with third parties, except for our processors necessary for operation (hosting provider), under data processing agreements. The data is retained for the duration of the service contract and deleted within 30 days after the contract ends or access is revoked.

You can revoke the access granted to Roomlytics at any time in your Google account's security settings (myaccount.google.com/permissions) or by emailing hello@roomlytics.ai.

Effective from 9 September 2026. The Controller may amend this policy; the current version is always available on this page. Last updated: 5 October 2026 (Google API disclosures added).