Privacy notice

Controller for Greenlit accounts and Solo billing: VRX IT Services Korlátolt Felelősségű Társaság, 2051 Biatorbágy, Kőris utca 2. A. ép. 1. em. 1. ajtó. Contact: info@vrxit.com. No separate data-protection officer is appointed.

Two roles

Your account, Solo invoices, security logs: we are the controller.

Offer content you type about clients (names, emails, VAT IDs, commercial terms): you are the controller. We process that data on your instructions as a processor — see the Terms. A client who wants that data corrected or deleted should contact the studio named on the offer. If they write to us, we forward or point them to you.

What we process and why

• Account: name, email, authentication identifiers (Clerk) — to create and secure the account (contract).
• Studio settings: studio name, country, VAT ID, IBAN, website — to render offers and pay paths (contract).
• Offers: titles, client details, amounts, scope, payment references, status — to host the page and stamp it (contract; processor for client fields).
• Solo billing: Stripe customer, subscription, tax IDs, billing address — to charge and invoice the software fee (contract; legal obligation for tax records).
• Connect: Stripe account ids and charges-enabled flags — to start Checkout on your account (contract).
• Webhook and Checkout session ids — to apply a payment, refund, or dispute once (legitimate interests: integrity of the stamp).
• Technical logs and the ops cookie if we look up an offer — security and support (legitimate interests).

We do not sell personal data. We do not run advertising pixels on this version of the site.

Processors and transfers

Clerk (sign-in), Stripe (Solo and Connect Checkout), Vercel (application hosting), Neon (Postgres in Frankfurt). Those providers may process data in the United States or other third countries. Where GDPR requires a transfer tool, they rely on Standard Contractual Clauses and any supplementary measures they publish. Hosting of application traffic is on Vercel; offer records are stored in the EU (Frankfurt) at the database layer.

Cookies

Only strictly necessary cookies and similar storage. Details: Cookies.

Public offer URLs are unlisted and sent with a noindex instruction. Anyone with the link can still read what you published.

Retention

Account and offer data while the account is open, and for a short period after deletion to finish backups and unwind payments. Solo billing and invoices are kept as required by accounting law (typically eight years for books). Security logs are kept only as long as needed to investigate abuse. To delete an account, email info@vrxit.com from the address on the account.

Your rights

You may request access, correction, deletion, restriction, portability, and (for legitimate-interest processing) objection. You may withdraw consent where processing was based on it (cookies here are not consent-based). You may complain to a supervisory authority in the EEA where you live, work, or where the controller is established — including the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) for this controller.

Children

The service is not offered to anyone under 18. We do not knowingly collect children’s data.

Changes

Material changes will be dated on this page. Continued use after the effective date is acceptance for B2B users; consumers keep any extra notice the law requires.