1. Introduction

This Privacy Policy explains how BP Les Cannisses KFT ("we," "our," "us") collects, uses, and protects personal data obtained through our website (genesis.bpcorp.eu) and related services.

We are committed to respecting your privacy and ensuring compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) in the EU and other international privacy regulations.

2. Data We Collect

We may collect the following types of information:

• Business Contact Information: Name, email address, phone number, company name, job title.
• Account Data: Login credentials, subscription preferences, usage history.
• Technical Data: IP address, browser type, device information, and usage patterns (via cookies and analytics).
• Payment Data: Processed securely via Stripe. We do not store card details.
• AI-Generated Content: Prompts, generated outputs, and related metadata.

We do not knowingly collect data from consumers or individuals outside a business/professional context.

3. How We Use Your Data

We process personal data only for legitimate business purposes, including:

• To provide and improve our services (ORBIT, Hunter, PULSE, PRISM, CAST).
• To communicate with you regarding inquiries, offers, and business opportunities.
• To personalize website content and marketing campaigns.
• To comply with legal and regulatory requirements.

We do not sell personal data to third parties.

4. Legal Basis for Processing (GDPR)

Under the GDPR, we rely on the following legal bases:

• Contractual necessity – when data is required to perform a contract or provide services.
• Legitimate interest – for marketing, business development, and fraud prevention.
• Consent – when you voluntarily submit data via forms or opt-in communications.

5. Data Sharing and Transfers

We may share personal data with:

• Service providers (Supabase, Vercel, Stripe, Resend) under strict confidentiality agreements.
• AI providers (Anthropic, OpenAI, Google) for service delivery.
• Legal authorities when required by law.

If data is transferred outside the European Economic Area (EEA), we ensure compliance through standard contractual clauses or equivalent safeguards.

6. Data Retention

We retain personal data only as long as necessary for business purposes or legal compliance:

• Account data: Duration of subscription + 30 days.
• Client records: Up to 7 years (for contractual and tax purposes).
• Analytics and cookies: As defined in our Cookie Policy.

7. Data Security

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest, secure servers within the EU, and regular security audits.

8. Your Rights (GDPR)

Depending on your jurisdiction, you may have the right to:

• Access and obtain a copy of your personal data.
• Correct or update inaccurate data.
• Request deletion ("right to be forgotten").
• Object to or restrict processing.
• Withdraw consent at any time.
• Data portability (receive your data in a structured format).

To exercise these rights, contact us at privacy@bpcorp.eu.

9. Contact Information

BP Les Cannisses KFT
1077 Budapest, Rózsa utca 38/A, Hungary
Email: privacy@bpcorp.eu
Website: https://genesis.bpcorp.eu