Data security
Data security: your data stays in the EU
Short answer
The product data, that is the assistant, the conversations and the knowledge base, stays in the EU, including the model calls. We keep conversations for 90 days and delete the demo preview after 24 hours. You are the data controller, and R-Szoft Kft. is the data processor.
Source: Privacy policy: data processors and retention, 7 October 2026
What “stays in the EU” covers
The promise applies to the product: the assistant, the conversations, the knowledge base and the leads collected by the assistant. These are stored in the AWS Frankfurt region, and the model calls run on the EU endpoint of Google Vertex AI.
Exception: Video AI, which is coming soon. Its voice and video generation also takes place with service providers in the United States (Eleven Labs, HeyGen and the global endpoint of Google Vertex AI); the finished video is stored in the EU. The legal basis of the transfer is set out in the Data processing agreement.
Details provided as an enquiry (name, email, phone, website address) are used only to get in touch. We do not use conversations or the knowledge base for model training.
Retention periods
| Data | Retention |
|---|---|
| Conversations | 90 days |
| Demo preview | 24 hours |
| Settings after a paused trial | 30 days |
| Data after the end of the contract | deleted within 30 days |
AI disclosure
Under Article 50 of the EU AI Act, the customer must know that they are talking to artificial intelligence. The widget header and its first message show this, and the disclosure cannot be switched off. The details are on the AI disclosure page.
Roles
You are the data controller, and R-Szoft Kft. is the data processor. The service is a product of R-Szoft Kft.; SmartAIAssist was previously called SmartAIChat.
The terms of data processing are set out on the Data processing agreement page; the table of data processors is shown below, in the “Data processors” section.
Data processors
These providers work with the data on our behalf. The product data, that is the assistant, the conversations and the knowledge base, stays in an EU region. We do not use conversations or the knowledge base for model training.
| Data processor | Role | Region |
|---|---|---|
| Amazon Web Services (AWS) | hosting, application and database | AWS eu-central-1 (Frankfurt) |
| Google Vertex AI, Gemini Regional | language model for the answers | EU endpoint |
| AWS Bedrock (Anthropic Claude Haiku) | fallback model, if the primary one is not available | AWS eu-central-1 (Frankfurt) |
| Cloudflare | website delivery (Workers), form database (D1), abuse protection (Turnstile) | D1 database: EU; the website is served by the Cloudflare network |
| Decodo | reading public pages for the demo | EU |
| Amazon SES | sending emails (demo link, weekly summary) | EU |
| Eleven Labs (Video AI, coming soon) | text-to-speech for the video | United States |
| HeyGen (Video AI, coming soon) | avatar video rendering | United States |
| Google Vertex AI (Video AI, coming soon) | ad image and ad video generation | image: EU endpoint; video: global endpoint, including the United States |
| Számlázz.hu | invoicing | Hungary |
Sources
- Privacy policy: data processors and retention, 7 October 2026 · own data · smartaiassist.eu/privacy-policy/ Frequently asked questions
Data security
Where is my data stored?
In the AWS Frankfurt region (eu-central-1). The model calls run on the EU endpoint of Google Vertex AI, and the fallback model is also in Frankfurt.
How long do you keep the conversations?
For 90 days. We delete the demo preview after 24 hours. If the trial is paused, we keep the settings for 30 days.
What happens to my data after cancellation?
We stop the service, delete the data within 30 days and settle the account. Documents subject to statutory accounting retention are an exception.
Does the customer know they are talking to a machine?
Yes. The widget header and its first message show that artificial intelligence is answering, and this disclosure cannot be switched off.
Can we sign a data processing agreement?
Yes. You are the data controller, R-Szoft Kft. is the data processor, and we sign a data processing agreement.
Related pages
See it with your own content.
The automatic preview is ready after you submit the form, and it is deleted after 24 hours.
In the example conversations, the assistant's answers are given by artificial intelligence. Disclosure under Article 50 of the EU AI Act: "Artificial intelligence, not a human".