Privacy Policy
Last updated: October 22, 2026
Who we are
The controller of your personal data is Kosztolányi Bence Ferenc, sole proprietor, 2373 Dabas, Gróf Vay Sándor utca 2, Hungary (trading as StepInside), email: [email protected]. As we are established in the EU, we process personal data under the EU General Data Protection Regulation (GDPR).
What we collect and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Name, email, phone, brokerage, business address, optional EIN/license number | Processing your order, delivery, support | Contract (Art. 6(1)(b)) | 8 years (see invoices) |
| Payment data | Payment | Contract; card data is handled by Stripe, we never see full card numbers | Per Stripe |
| Invoice data | Issuing invoices, tax records | Legal obligation (Art. 6(1)(c)), Hungarian accounting law | 8 years |
| Photos, listing link, logo/headshot | Creating your Video | Contract | Deleted 30 days after delivery |
| Finished Videos | Delivery, revisions | Contract | Deleted 90 days after delivery |
| Portfolio use of your Video | Showing samples | Your consent (Art. 6(1)(a)), withdrawable anytime | Until withdrawn |
| Business contact details of real estate professionals (name, business email, company, city), obtained from B2B data provider Apollo.io | Sending a small number of business emails about our service | Legitimate interest (Art. 6(1)(f)) | Non-responders deleted within 6 months; opt-outs kept on a suppression list so we never contact you again |
Who processes data for us
We use these service providers, under data processing terms:
- Stripe (payments) – Ireland/USA
- Tally (order form) – Belgium
- Google (email, file storage, order spreadsheet) – Ireland/USA
- Make (automation) – Czech Republic
- Higgsfield (AI video generation; receives your photos) – USA
- Anthropic (AI assistant used in production and email drafting) – USA
- Cloudflare (website hosting) – USA
- Számlázz.hu / KBOSS.hu Kft. (invoicing) – Hungary
- Instantly and Apollo.io (business email outreach) – USA
Transfers outside the EU rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses. We do not sell personal data.
Your rights
You can request access, correction, deletion, restriction, data portability, and object to processing based on legitimate interest (including all marketing emails – just reply "no" or email us). We respond within one month. You may complain to the Hungarian data protection authority (NAIH, naih.hu) or your local authority.
Cookies
Our website uses only cookies that are strictly necessary for it to work. If we add analytics, we will ask for your consent first.