Skip to content
Cleverlio

Legal

Privacy Policy

Last updated: October 2026

Short version: the calculators and builders run in your browser, and what you type into them and the documents you create are not sent to us. Finished template and builder downloads ask for your email address, and downloading subscribes it to our newsletter (see section 3). Calculators, results on screen, previews, copying text and draft files need no email address. We also process some personal data to host and protect the site, to answer emails, and for accounts left over from an earlier private beta. This page explains each one.

1. Who is responsible

Cleverlio is operated by Wágner Marcell Péter e.v., a sole proprietor. Wágner Marcell Péter e.v. is the data controller responsible for the personal data described in this Privacy Policy.

Postal address: 1221 Budapest, Kiránduló utca 84., Hungary. For anything about privacy, email support@cleverlio.com.

2. What you type into a calculator, builder or template

Calculations happen on your device. The values you enter are not stored on our servers and are not sent to us or to anyone else. On most pages, reloading the page clears them.

The quote, proposal, invoice and receipt builders, the price-list maker and the purchase-order generator keep a copy of the document you are working on in your browser’s session storage, so a reload does not lose it. Session storage belongs to that browser tab: the copy is removed when you close the tab or select Clear form, and it is never sent to us. Logos you add are processed on your device. PDFs, Word files, images and draft files you create are saved only where you choose to save them. In the email signature generator, if you enter the web address of a logo hosted elsewhere, your browser loads that image from its host to show the preview, and that host receives the request as it would for any image on the web.

3. Newsletter signup next to downloads

Template files and the finished files made in the document builders ask for your email address before they download. Next to the download button it says: “By downloading, you agree to receive occasional emails from Cleverlio with useful tools, tips and product recommendations. Unsubscribe anytime.” Using the calculators and seeing results on screen, opening previews, copying text and saving or opening draft files need no email address, and nothing about you is sent to us for them. Your browser fetches or makes the file itself, and the contents of a document you create are never part of a signup.

When you enter your email address and download:

  • Your browser loads Cloudflare Turnstile from challenges.cloudflare.com, which checks that a person is submitting the form. Cloudflare receives the technical data that comes with that request, such as your IP address and browser details.
  • Your browser sends our newsletter service only your email address, the wording and version of the notice shown next to the button, the name and category of the page you signed up from, and the result of that check.
  • The service confirms the check with Cloudflare and passes on your IP address for it. To limit abuse it counts recent signups per IP address and per email address; those counters hold a salted one-way hash, not the address itself. Its logs record what happened (for example “subscribed”), not your address.
  • You are subscribed straight away; no confirmation email is sent, so we do not check that the address belongs to the person who entered it. If your address was entered by someone else, use the unsubscribe link in any newsletter or contact us. The service stores your email address, your subscription status and when it changed, and a record of your consent: the exact wording you agreed to, when, and from which page.
  • We use your address only for Cleverlio’s own emails. We do not share it with advertisers or partners.
  • Your email address and the page you signed up from are added to our newsletter list at Resend, which sends the newsletter. Resend tells us when an email bounces, is reported as spam or when you unsubscribe, and we record that.
  • An address that has unsubscribed, bounced or been reported as spam is not subscribed again by downloading; the file still downloads.
  • If the signup cannot be recorded (for example our service is unavailable), the file still downloads, the page says the signup was not recorded, and you are not subscribed.

Every newsletter has an unsubscribe link. Where a page says the signup is only a preview, nothing is sent: the download still works and your address does not leave your browser.

The newsletter service runs on Supabase (a server function and a database), hosted at Supabase’s EU region in Ireland. Legal basis: your consent, given by entering your email address and downloading after the notice next to the download button (GDPR Article 6(1)(a)); you can withdraw it at any time with the unsubscribe link in every email. We keep this data for as long as you stay subscribed. After you unsubscribe, or if your address bounces or is reported as spam, we keep only the address and that record, for as long as we send the newsletter, so that we never email it again.

4. Hosting and security

The site is delivered by Cloudflare, Inc. (United States). When you visit, Cloudflare processes technical data about your request — such as your IP address, browser type and the page requested — to deliver the site and protect it from abuse. We do not run our own servers or access logs for the site.

  • Cookies: the site sets no cookies during normal browsing. If Cloudflare needs to check a suspicious request, it may set a strictly necessary security cookie for that check. See the Cookie Policy.
  • Email addresses on our pages are protected from spam robots by a small Cloudflare script, served from cleverlio.com itself.
  • No analytics or advertising: we do not use analytics, advertising or tracking services. Pages, scripts, fonts and downloads all come from cleverlio.com. Your browser contacts other companies’ servers only in the cases described here: the newsletter signup and its anti-abuse check (section 3), and a logo hosted elsewhere if you enter its address in the email signature generator (section 2).
  • Your theme choice (light or dark) is kept in your browser’s local storage and never leaves your device.

Legal basis: our legitimate interest in delivering the site reliably and protecting it from abuse (GDPR Article 6(1)(f)).

5. When you email us

We use your email address and message only to reply and help you. Email to cleverlio.com is received and stored by Zoho Mail, EU data centre.

Legal basis: our legitimate interest in replying to messages you send us (GDPR Article 6(1)(f)), or, where your message asks about entering into an agreement with us, taking the steps you asked for (Article 6(1)(b)). We keep emails for up to 24 months after the conversation ends, unless a particular message is needed longer to establish, exercise or defend a legal claim.

6. Accounts from our earlier beta

From February to September 2026, Cleverlio ran a private beta of a marketing app that used accounts. The app is no longer available, but the data of its accounts is still stored: email address, name, a hashed password, the business details you entered, copies of the public website pages you asked us to import, and the plans and content generated for you. No payment details were ever collected.

  • That data is stored with Supabase, database hosted in the EU (Ireland, AWS eu-west-1).
  • While the beta ran, business details were sent to OpenAI, through its API (a United States company) to generate plans and content, and part of that generation ran on Cloudflare’s servers.

Legal basis: while the beta ran, providing the account you asked for (GDPR Article 6(1)(b)); since it closed, our legitimate interest in keeping the data only until its deletion, which is being prepared, is completed (Article 6(1)(f)). We keep it for until the planned deletion is completed; nothing has been deleted yet, and you can ask us to export or delete it at any time.

7. Transfers outside the EU

Some of our providers are based, or have staff, outside the European Economic Area. Cloudflare and Resend rely on their certification under the EU-U.S. Data Privacy Framework and on the European Commission’s standard contractual clauses. For the beta, OpenAI processed data through OpenAI Ireland Ltd, which uses standard contractual clauses (or an adequacy decision) when data goes outside the EEA. Supabase stores our data in Ireland and is bound by standard contractual clauses for access from outside the EEA. Zoho stores our mail in its EU data centre, under a signed data processing addendum; its staff in India may access it for technical support under standard contractual clauses.

8. Your rights

You can ask for access to, correction of, export of or deletion of your personal data, and object to or restrict how we process it — see GDPR & data rights. You can withdraw your newsletter consent at any time with the unsubscribe link in any newsletter. You also have the right to complain to a supervisory authority: the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH, Hungarian National Authority for Data Protection and Freedom of Information), naih.hu.

We do not sell personal data and do not use it for automated decisions about you.

9. Changes

If we add features that process more data — for example optional accounts — we will update this policy before they go live.