Privacy Policy

1. Introduction

LavX Managed Systems ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your personal information when you use our website and services.

Our Data Protection Representative is Laszlo Adam Toth, who can be contacted using the information provided in Section 9.

2. Data We Collect

We collect and process the following types of personal data:

• Chat Data:
  • Messages and information shared during chat sessions
  • Browser fingerprint for session management
  • Automatically extracted information like name, company, or project details
  • All chat data is automatically deleted after 24 hours
• Contact Form Data:
  • Name and email address
  • Message content
  • Subject of inquiry
• Technical Data:
  • Browser type and version
  • Device information
  • IP address
  • Analytics data (if consented)

3. How We Use Your Data

We use your personal data for the following purposes:

• Chat Service:
  • Providing real-time chat assistance
  • Maintaining chat context and history (24-hour retention)
  • Creating vector embeddings for better response relevance
  • Analyzing chat content for lead generation
• Contact Management:
  • Responding to your inquiries
  • Sending service-related communications
  • Processing business inquiries and leads
• Service Improvement:
  • Analyzing service usage patterns
  • Improving chat responses and user experience
  • Website analytics (with consent)

4. Data Storage and Security

We use the following systems to store and process your data:

• Temporary Storage (Redis):
  • Chat sessions and messages
  • User information from chats
  • Automatic deletion after 24 hours
• Vector Storage (Qdrant):
  • Message embeddings for context understanding
  • Deleted along with chat sessions after 24 hours
• Email System:
  • Contact form submissions
  • Lead notifications
  • Processed through secure SMTP

All data is stored within the European Union in compliance with GDPR regulations.

5. Automated Processing

We employ automated processing in the following ways:

• Chat analysis for lead generation after 10 minutes of inactivity
• Vector embeddings creation for message context
• Automatic information extraction from chat conversations

You have the right to object to automated processing of your data at any time.

6. Your Rights Under GDPR

Under GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct your personal data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Object: Object to processing of your data
• Right to Data Portability: Request transfer of your data

Note: Most data is automatically deleted after 24 hours, but you can request immediate deletion at any time.

7. Analytics and Tracking

We use Google Analytics to understand website usage patterns and improve our services. This service collects:

• Usage Data:
  • Pages visited and time spent
  • Interaction with website features
  • Traffic sources and navigation paths
• Technical Information:
  • Device type and screen size
  • Browser type and version
  • Geographic location (country/city level)

Google Analytics data collection is subject to your consent. You can:

• Choose whether to allow analytics cookies
• Change your preferences at any time
• Use our services without analytics enabled

Data collected by Google Analytics is processed in accordance with Google's Privacy Policy and retained for 26 months.

9. Cookie Policy

Cookies We Use

You can manage your cookie preferences at any time using our cookie consent tool or through your browser settings.

10. Data Processing Agreement (DPA)

For enterprise clients requiring a formal Data Processing Agreement under GDPR Article 28, we provide comprehensive DPA documentation covering:

• Data processing scope and purpose: Clear definition of processing activities and lawful basis
• Security measures and obligations: Technical and organizational security controls
• Sub-processor management: Transparent disclosure and management of third-party processors
• Data subject rights procedures: Processes for handling access, rectification, and deletion requests
• Incident response protocols: Data breach notification and response procedures
• International data transfers: Safeguards for transfers outside the EU/EEA
• Audit rights and compliance: Client audit rights and compliance verification

To request our standard DPA template or discuss custom terms, contact: [email protected]

DPA Processing Time: Review and execution typically completed within 5-7 business days.

Available for: Enterprise clients, regulated industries, and organizations with specific compliance requirements.

8. Cloudflare Services

We use Cloudflare for content delivery, security, and performance optimization. Cloudflare processes:

• Connection Data:
  • IP addresses
  • Basic HTTP request data
  • Browser type and version
• Security Information:
  • Security tokens and cookies
  • Traffic patterns for threat detection
  • DDoS protection metrics

Cloudflare's processing is essential for our website's security and performance. Their services comply with GDPR and other privacy regulations. For more information, you can review Cloudflare's Privacy Policy.

9. Contact Information

For any privacy-related questions or to exercise your rights, contact our Data Protection Representative:

• Name: Laszlo Adam Toth
• Email: [email protected]
• Phone: +36-30-907-3238
• Address: Bauer Sandor str. 1, 2nd door, Taksony, 2335, Hungary

We will respond to all legitimate requests within one month.

10. Updates to This Policy

We may update this privacy policy from time to time. The latest version will always be posted on this page with the updated date at the top. Significant changes will be notified through our website or email.