Privacy Policy

Effective from: 5 October 2026

This policy explains how RevenueGen (operated by Kiss Gergő e.v., a Hungarian sole proprietor) handles personal data in connection with the revenuegen.io website, appointment booking, our business outreach and our client work: what we process, why, on what legal basis, for how long, and what rights you have.

We deliberately avoid quoting legislation word for word and try to keep this readable. If anything is unclear, write to gergo@revenuegen.io.

This policy was prepared in line with Regulation (EU) 2016/679 (GDPR), Hungarian Act CXII of 2011 on informational self-determination (Infotv.), Act XLVIII of 2008 on commercial advertising (Grt.), Act C of 2000 on accounting (Sztv.) and Act V of 2013, the Civil Code (Ptk.).

1. Data controller

Name: Kiss Gergő e.v. (sole proprietor), trading as RevenueGen
Registered address: Damjanich utca 3, 6900 Makó, Hungary
Tax number: 90882944-1-26
Registration number: 60232085
Email: gergo@revenuegen.io
Website: revenuegen.io

We are not required to appoint a data protection officer. For any data protection matter, use the email address above.

2. Definitions

The terms below are used in the meaning given in Article 4 of the GDPR:

Personal data: Any information relating to an identified or identifiable natural person (the data subject). A person is identifiable if they can be identified directly or indirectly, for example by name, identification number, location data, an online identifier or other specific factors.
Processing: Any operation performed on personal data, whether or not by automated means: collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, alignment, restriction, erasure or destruction.
Controller: The person or organisation that determines the purposes and means of processing. In respect of this policy, Kiss Gergő e.v. (RevenueGen).
Processor: A person or organisation that processes personal data on behalf of the controller, on its instructions.
Consent: A freely given, specific, informed and unambiguous indication of the data subject's wishes by which they agree, by a statement or a clear affirmative action, to the processing of their personal data.
Personal data breach: A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.
Recipient: A person or organisation to which personal data is disclosed, whether a third party or not.

3. What we process, why and for how long

3.1. Visiting the website (server logs, security)

Purpose: Serving the website, keeping it secure and fixing errors.
Legal basis: Legitimate interest (GDPR Art. 6(1)(f)): running a secure, working website.
Data subjects: Visitors of revenuegen.io.
Data: IP address, date and time of the visit, pages requested, browser and device type.
Retention: Log data is kept by our hosting provider for a short period, typically up to 30 days.

The site loads its typeface from Google Fonts, which means your browser connects to Google's servers and shares your IP address with them when a page loads.

3.2. Analytics cookies (Vercel Analytics, Microsoft Clarity)

Purpose: Measuring traffic and understanding how visitors use the site (clicks, scrolling, heatmaps, session replays) so we can improve it.
Legal basis: Your consent (GDPR Art. 6(1)(a)), given in the cookie banner. Neither tool loads before you consent.
Data subjects: Visitors who accept analytics cookies.
Data: Vercel Analytics: aggregated, cookieless page-view data. Microsoft Clarity: cookie identifiers, IP address (stored in shortened form), device and browser data, on-page interactions. Text typed into fields is masked by default.
Retention: Until you withdraw consent; Microsoft keeps Clarity data for up to 13 months.

You can withdraw consent at any time, free of charge, by reopening the cookie settings with the cookie icon in the bottom-left corner of the site. Withdrawal does not affect processing that happened before it. We do not run advertising or remarketing pixels on this website.

3.3. Booking a call

Purpose: Scheduling and holding the consultation you booked, preparing for it and keeping in touch about it.
Legal basis: Steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)).
Data subjects: People who book a call through the calendar embedded on the site or through our booking links.
Data: Name, email address, phone number (if provided), company name and website, the chosen time slot, and anything you write in the booking form.
Retention: If a contract follows, as described in 3.5. If not, up to 12 months after the last contact.

The calendar is provided by Cal.com (EU-hosted, cal.eu). The data you enter in the booking form goes directly into that system.

3.4. Business outreach (cold email and phone)

Purpose: Contacting businesses with an offer relevant to their activity, and handling the replies.
Legal basis: Legitimate interest (GDPR Art. 6(1)(f)): direct B2B contact. We have carried out a balancing test, which we will share on request.
Data subjects: Contact persons, managers and owners of the businesses we reach out to.
Data: Company name, website, business email address and phone number, name and job title of the contact person (where public), and the history of our correspondence (replies, opt-outs).
Source of data: Publicly available sources: the company's own website, Google Maps / Google Business Profile, public company registers and professional B2B databases.
Retention: Up to 12 months after the last contact. If you opt out, we keep only your email address or domain on a suppression list so that we do not contact you again.

You can object at any time, without giving a reason: reply to any of our emails or write to gergo@revenuegen.io and we will stop contacting you.

3.5. Contracts with clients and invoicing

Purpose: Preparing quotes, concluding and performing the contract, communication during the engagement, invoicing.
Legal basis: Performance of a contract (GDPR Art. 6(1)(b)) where the client is a natural person or sole proprietor; legitimate interest (Art. 6(1)(f)) for contact persons of client companies; legal obligation (Art. 6(1)(c)) for invoices and accounting records.
Data subjects: Clients who are natural persons, and representatives and contact persons of client companies.
Data: Name, email address, phone number, position, billing name and address, tax number, and the communication related to the engagement.
Retention: 5 years after the contract ends (general limitation period, Ptk. 6:22); invoices and accounting documents for 8 years (Sztv. § 169).

3.6. Email and other enquiries

Purpose: Answering your message.
Legal basis: Legitimate interest (GDPR Art. 6(1)(f)), or steps prior to a contract (Art. 6(1)(b)) if you ask for a quote.
Data: Name, email address and the content of your message.
Retention: Up to 12 months after the last message, unless a contract follows.

3.7. Personalised analysis and audit pages

If we send you a link to an analysis or audit page prepared for your company, we log when the page is opened (the page identifier, the time and the browser type). Purpose: knowing whether the material was received. Legal basis: legitimate interest (GDPR Art. 6(1)(f)). These pages are not indexed by search engines and expire after a limited time. Retention: up to 12 months.

3.8. Our social media pages

We run pages and profiles under the names "Kiss Gergő - RevenueGen" and "Gergo Kiss - RevenueGen" on YouTube, TikTok, Instagram, Facebook, LinkedIn and X. Anyone can follow these, like, comment on or share posts, and send us a message through them. Please do not send sensitive personal data through social media messages.

Purpose: Presenting our work, publishing professional content, answering comments and messages.
Legal basis: Legitimate interest (GDPR Art. 6(1)(f)): maintaining a professional presence and communicating with those who contact us.
Data: Your public profile name and picture, the content of your comments, reactions and messages. Aggregated page statistics provided by the platform (for Facebook and Instagram pages we are joint controllers with Meta for these "insights" data).
Retention: Comments and reactions stay visible as long as the post or your account exists; you can delete them yourself at any time. Messages: up to 12 months after the last message.

Each platform operator is an independent controller of the data it processes about you. Their privacy policies: Meta (Facebook, Instagram): www.facebook.com/privacy/policy/ ; TikTok: www.tiktok.com/legal/page/eea/privacy-policy/en ; YouTube (Google): policies.google.com/privacy ; LinkedIn: www.linkedin.com/legal/privacy-policy ; X: x.com/en/privacy

4. When we work with our clients' data (data processing)

When we manage advertising accounts, landing pages, analytics and lead-handling automations for a client, we may access personal data of the client's own customers and leads (for example enquiries submitted through a form). In these cases the client is the data controller and RevenueGen acts as a data processor: we handle the data only on the client's instructions, under a data processing agreement (GDPR Art. 28) that forms part of our contract.

Advertising accounts and the data in them remain the client's property. We never use client data to train external AI models.

5. Who has access to the data, and our processors

Personal data is accessed by Gergő Kiss as the controller and, to the extent strictly necessary for the task, by contractors working with us under confidentiality obligations. We do not sell personal data and do not pass it on to third parties for their own purposes.

We use the following service providers (processors):

Vercel Inc. (USA): Website hosting, server logs, Vercel Analytics.
Microsoft Ireland Operations Ltd. / Microsoft Corp.: Microsoft Clarity website analytics (only with consent).
Cal.com, Inc.: Appointment booking (EU-hosted cal.eu).
Google Ireland Ltd.: Google Workspace (email, calendar, video calls, documents), Google Fonts.
Plusvibe: Sending and managing outreach emails.
Neon (Databricks, Inc.): Database hosting for business contact data and analysis pages.
HighLevel Inc. (GoHighLevel, USA): CRM, lead handling and automated follow-up.
n8n GmbH (Germany): Workflow automation between our systems.
ClickUp (Mango Technologies, Inc.): Project management.
Billingo Technologies Zrt. (Hungary): Issuing invoices (billing data only).
Proab (accounting firm, Hungary): Bookkeeping and tax filings (billing data only).

Some of these providers are based in, or may access data from, the United States. In those cases the transfer relies on the EU-US Data Privacy Framework adequacy decision or on Standard Contractual Clauses adopted by the European Commission.

6. Data security

We take technical and organisational measures appropriate to the risk to protect personal data against unauthorised access, alteration, disclosure, loss and destruction. In particular:

data is stored in password-protected systems with two-factor authentication wherever available;
access is limited to those who need it for their task;
data travels over encrypted connections (HTTPS/TLS);
we work with providers that offer appropriate data protection guarantees.

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

7. Your rights

You can exercise the rights below by writing to gergo@revenuegen.io or by post to our registered address.

7.1. Right of access

You can ask whether we process your personal data and, if so, receive a copy of it together with the purposes, the categories of data, the recipients, the retention period and the source of the data.

7.2. Right to rectification

You can ask us to correct inaccurate data or complete incomplete data without undue delay.

7.3. Right to erasure

You can ask us to delete your data if the purpose has ceased, you have withdrawn consent, you have successfully objected, or the processing is unlawful. We may refuse erasure where we are legally obliged to keep the data (for example invoices) or need it to establish, exercise or defend legal claims.

7.4. Right to restriction

You can ask us to restrict processing while the accuracy of the data or your objection is being examined, if the processing is unlawful but you oppose erasure, or if we no longer need the data but you need it for legal claims.

7.5. Right to data portability

Where processing is based on consent or a contract and is carried out by automated means, you can receive the data you provided in a commonly used, machine-readable format, or have it transmitted to another controller.

7.6. Right to object

You can object at any time to processing based on legitimate interest. If you object to processing for direct marketing purposes (including our business outreach), we stop without further assessment.

7.7. Right to withdraw consent

Where processing is based on consent (analytics cookies), you can withdraw it at any time. This does not affect the lawfulness of processing before the withdrawal.

7.8. How we handle requests

We respond without undue delay and at the latest within one month of receiving the request. For complex or numerous requests this may be extended by two further months, in which case we inform you of the reasons within the first month. Requests are handled free of charge; for manifestly unfounded or excessive (especially repetitive) requests we may charge a reasonable fee or refuse to act.

8. Remedies

8.1. Complaint to the supervisory authority

If you believe that our processing infringes data protection law, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), or with the supervisory authority of your place of residence.

Name: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Address: Falk Miksa utca 9-11, 1055 Budapest, Hungary
Postal address: 1363 Budapest, Pf. 9.
Phone: +36 1 391 1400
Email: ugyfelszolgalat@naih.hu
Website: naih.hu

We ask that you contact us first, so we have the chance to resolve the issue.

8.2. Judicial remedy

You can also go to court if your rights have been infringed. You may bring the action before the regional court (törvényszék) of your place of residence or stay, or of the controller's registered seat. The court hears such cases out of turn.

9. Personal data breaches

A personal data breach is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data. We report a breach to the supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it, unless it is unlikely to result in a risk to your rights and freedoms. If the breach is likely to result in a high risk, we also inform you without undue delay, describing what happened, the likely consequences and the measures taken.

10. Changes to this policy

We may update this policy, for example when our services, tools or the law change. The current version is always available on this page, with its effective date at the top.