Privacy notice

Who controls the data

The controller and the provider of Croco is BIMeXpert Korlátolt Felelősségű Társaság (BIMeXpert Kft.), an EU company established in Hungary. Seat: 2030 Érd, Bányász utca 21., Hungary. Office: 1117 Budapest, Hunyadi János út 3. Company register number: 13-09-217846. Tax number: 26392822-2-13. Represented by managing director Tamás Orosz. Contact: privacy@crocoai.hu. Service address: https://crocoai.hu.

BIMeXpert Kft. is established in the European Union. The EU General Data Protection Regulation applies, together with the Hungarian Information Act (Act CXII of 2011). No separate EU representative is required.

What we process

Account: name, email, Google account identifier if you sign in with Google, username, language, and time zone.

Use: messages you send to Croco, files you upload, CrocoDrive contents, websites and apps you start, audio if you use speech, and technical session logs.

Billing: plan, invoice details, and the transaction reference created by the payment provider. We do not store full card numbers.

The Chrome extension has its own notice and names the same provider.

Why, and on what basis

Contract: the account, the work you ask for, hosting, and the subscription.

Legitimate interests: security, abuse prevention, debugging, and keeping the service running. Access is limited and logged.

Legal obligation: accounting and tax retention.

Consent only where no other basis applies, such as non-essential cookies. You can withdraw consent.

Artificial intelligence

Croco is an AI system. Model providers produce replies from your instruction and the content the task needs. Output can be wrong. You decide what is published or sent.

Prompts and attached content are sent to the operator of the model used for that reply. Recipients may be outside the EEA. Transfers then rely on an adequacy decision or the EU standard contractual clauses.

Recipients

Hosting and operations in the European Union. Model and speech providers on the route in use, which can include OpenRouter, Google, Anthropic, OpenAI, and Ollama, plus the speech provider that is switched on.

Payments: the payment provider shown at checkout, with the data that provider needs for the transaction.

Authorities when the law requires it.

Retention

The account and its content stay for the life of the account, or until you ask for deletion, unless a statute requires longer storage. Accounting records follow Hungarian accounting rules. Security logs stay for as long as the investigation needs.

Your rights

Access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. You may withdraw consent at any time.

Write to privacy@crocoai.hu. You may complain to the NAIH and to the supervisory authority of your EU country of residence.

Sites you operate

When Croco hosts a website or app for you, you are the controller of visitor data collected on that surface, and BIMeXpert Kft. is the processor to the extent needed to provide the service. A processing agreement is available on request.