Privacy Policy

Last updated: 15 July 2026

This Privacy Policy explains how Rayofla Kft. (“Dafado”, “we”, “us”) collects, uses, and protects your personal data when you record a voice review, claim or respond as a venue owner, or visit dafado.com. We are the data controller for the personal data described below.

1. Who we are

Dafado is operated by Rayofla Kft. (Rayofla Korlátolt Felelősségű Társaság), a company registered in Hungary, tax number 27976971-2-43, with its seat at 1093 Budapest, Közraktár utca 12/B, 3. em. 2. We decide how the personal data described here is held and used, which makes us the data controller.

For anything in this policy, write to privacy@dafado.com.

2. What we collect

We collect only what the service needs.

If you record a review

• the audio recording of your voice;
• a first name, if you choose to give one, which is optional;
• a star rating, if you choose to give one;
• a photo, if you choose to add one;
• the location of the place you are reviewing, if you search for it or share your device location;
• a hashed record of your IP address and your browser and device type, used to prevent spam and abuse;
• the language you recorded in;
• a record of your consent, including the date and time and the version of the terms you agreed to, so we can show that you agreed.

You do not need an account to record a review.

If you are a venue owner

• your name, email address, and role at the venue;
• the evidence you give us that you are connected to the venue;
• your account details once a claim is approved;
• any audio reply you record, and any photo captions you write.

Technical information

Like most websites, our servers automatically record your IP address, browser type, the pages you view, and the date and time of your visit, for security and to keep the service running.

3. Your voice recording

Your voice is personal data, and in some readings it is sensitive. We treat it that way.

When you press record, the audio is uploaded directly from your browser to our storage and is private by default. A recording is not published anywhere until it is deliberately published. Nothing is published automatically.

We use the recording to provide the service to the venue you reviewed, to produce a written transcript, and, where you or the venue chooses, to publish it as a public review. Our legal basis is your consent, which you give on the recording page before you submit.

We do not use your voice to build voiceprints, to identify you biometrically, or to train AI models.

4. Venue owners

A venue owner can claim a venue by telling us who they are and how they are connected to it. We use that information solely to decide whether to approve the claim. If approved, we create an account so the owner can read and reply to reviews of that venue. Our legal basis here is contract, together with our legitimate interest in checking that a claim is genuine.

5. How we use your data

• To record, store, transcribe, and where chosen publish voice reviews.
• To translate transcripts on request.
• To notify a venue that it has received a review.
• To let a verified owner reply in their own voice.
• To keep the service secure and to prevent spam and abuse.
• To keep proof of consent.
• To meet our legal obligations.

If you give us an email address, we use it only in connection with your submission or your account. We do not add you to a mailing list unless you separately ask us to.

6. Our legal bases

• Consent for recording, storing, and publishing your voice review.
• Contract for venue owner accounts and the service we provide to venues.
• Legitimate interests for security, spam prevention, and operating the platform.
• Legal obligation where the law requires us to keep records.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that already happened.

7. Published reviews are public

A published review page is public and can be indexed by search engines. It may show your recording, your transcript, your first name if you gave one, your rating, your photo, and the venue and its location.

Once something is public on the internet, other people can copy, quote, archive, or share it. We can remove what we control. We cannot guarantee removal of copies made by others.

8. Transcription and translation

Every recording is transcribed automatically so the words can be read as well as heard. Transcription runs on our own server in Germany using open-source speech recognition. Your audio is not sent to a third-party transcription company.

Translation is different. If a translation of a transcript is requested, the text of the transcript (not your audio) is sent to Anthropic to be translated. See International transfers.

Transcripts and translations are produced by machine. They can contain mistakes. They are offered as a convenience and the recording itself is the original.

We do not use automated decision-making that produces legal effects about you.

9. Who we share data with

We do not sell personal data. We share it only with the providers who help us run Dafado, and only as far as needed:

Provider	What it handles
Cloudflare	Storage of the audio recordings and photos, content delivery, and security
Hetzner	The server in Germany that produces transcripts
Anthropic	Translation of transcript text, when a translation is requested
Emailit	Delivery of our transactional emails
MXroute	Our own mailboxes, which receive mail you send us
Rocket.net	Website hosting

These providers act as our processors and may only use your data on our instructions. We may also disclose data where we are legally required to do so, or to protect our legal rights.

10. International transfers

Your recordings are stored and transcribed inside the European Union.

Anthropic is based in the United States. When a transcript is translated, that text is transferred outside the EU. Where that happens we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses. Some of our other providers may also process limited data outside the EU or EEA under the same safeguards.

11. How long we keep data

• Recordings that are not published are kept for as long as the venue needs to review them, and are deleted on request.
• Published reviews are kept for as long as the review page remains public.
• Venue owner accounts are kept while the account is active.
• Claim records are kept while needed to show why a claim was approved or rejected.
• Consent records are kept for as long as the related recording exists, because they are the proof that you agreed.
• Server and security logs are kept for a limited period and then deleted.

12. Removing your recording

You can ask us to remove your recording at any time by emailing privacy@dafado.com. Tell us enough to find it, such as the venue and roughly when you recorded.

If the recording has not been published, we delete it. If it has been published, we unpublish the review page and delete the recording. Copies that other people have already downloaded or shared are outside our control.

13. Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to erase your data (the “right to be forgotten”);
• restrict or object to how we process your data;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing already carried out.

To exercise any of these rights, email privacy@dafado.com. We may need to verify your identity before we respond.

You also have the right to lodge a complaint with the Hungarian data protection authority, the National Authority for Data Protection and Freedom of Information (NAIH), at naih.hu.

14. How we protect your data

Recordings are uploaded over an encrypted connection and stored in access-controlled storage. IP addresses are stored hashed, not in the clear. We use reasonable technical and organisational measures to protect personal data. No system is completely secure, so we cannot promise absolute security.

15. Age

Dafado is not directed to children. Recording a review is intended for people who are at least 18, or who have permission from a parent or legal guardian. We do not knowingly collect personal data from children under 16 without appropriate consent. If you believe a child has provided us with personal data, contact us so we can review and, where appropriate, delete it.

16. Cookies

Dafado uses only the cookies it needs to work, such as keeping you logged in if you have an owner account and remembering your consent choices. We do not use advertising cookies and we do not sell data to advertisers.

17. Changes to this policy

We may update this policy. The updated version will be posted here with a new “Last updated” date. If a change is material we will make reasonable efforts to tell you.

18. Contact us

Rayofla Kft.
1093 Budapest, Közraktár utca 12/B, 3. em. 2., Hungary
Tax number: 27976971-2-43

Privacy: privacy@dafado.com
General: hello@dafado.com
Reporting content: abuse@dafado.com