Privacy Policy

Last updated: 20 August 2026

This Privacy Policy explains how Rayofla Kft. (“Dafado”, “we”, “us”) collects, uses, and protects your personal data when you record a voice review, claim or respond as a place owner, or visit dafado.com. We are the data controller for the personal data described below.

1. Who we are

Dafado is operated by Rayofla Kft. (Rayofla Korlátolt Felelősségű Társaság), a company registered in Hungary, tax number 27976971-2-43, with its seat at 1093 Budapest, Közraktár utca 12/B, 3. em. 2. We decide how the personal data described here is held and used, which makes us the data controller.

For anything in this policy, write to privacy@dafado.com.

2. What we collect

We collect only what the service needs.

If you record a review

• the audio recording of your voice;
• a first name, if you choose to give one, which is optional;
• a star rating for a recent experience, if you choose to give one. Past experiences do not have star ratings;
• up to four photos. A photo is optional for a recent experience and required for a past experience;

n

• available photo metadata, such as capture date, time, and location, used to suggest visit details and support the selected place. Exact photo location details remain private;
• the location of the place you are reviewing, if you search for it or share your device location;
• a hashed record of your IP address and your browser and device type, used to prevent spam and abuse;
• the language you recorded in;
• your email address, which you must give before you can submit a review. You do not give it at the microphone: we ask for it on the last step, after you have already recorded, and only so we can send you a link that confirms the address is yours. We keep it with your recording until you confirm it, and if you never do we delete it with the recording — see section 11;
• a record of your consent, including the date and time and the version of the terms you agreed to, so we can show that you agreed.

You do not need an account to record a review. You do need one to publish it. The microphone asks nothing of you: you record first, and only then are you asked for an email address. Nothing is public until you confirm it, and confirming it is what creates your account. See section 3, and section 11 for what happens to a recording nobody confirms.

If you are a place owner

• your name, email address, and role at the place;
• the evidence you give us that you are connected to the place;
• your account details once a claim is approved;
• any audio reply you record, and any photo captions you write.

Technical information

Like most websites, our servers automatically record your IP address, browser type, the pages you view, and the date and time of your visit, for security and to keep the service running.

3. Your voice recording

Your voice is personal data. In some interpretations of the law a voice recording is a special category of data, so we treat it with that level of care. We do not use it as biometric data to identify you.

When you press record, the audio is uploaded directly from your browser to our storage. Before you submit, you are asked to agree to one specific line: “Share my review publicly on Dafado so people can find it.” You cannot submit a review without agreeing to it. If you are already signed in, you agree by publishing: the button says so in plain words, and we record what it said. Publishing your review in public is the point of Dafado, and it is what you are choosing when you record.

Nothing is published until you confirm your email

Agreeing to that line is your permission to publish. It is not the last step. We do not publish any review until the person who recorded it has confirmed an email address.

You give us your email on the last step, before you submit, and we send you a link. Opening that link confirms the address is yours, creates your account, and your review goes live. Until you open it, your review is not public: nobody can find it, it is not on the place’s page, and search engines cannot see it. If you never open it, we delete the recording — see section 11.

We do this because a published review names a real business and can affect it. Everyone whose voice is public on Dafado is a real person we can reach. It also means a review is yours: it appears on your profile, and you can delete it yourself at any time.

We use the recording to publish it as a public review, to produce a written transcript, to translate that transcript so readers in other languages can understand it, and to let the place you reviewed read it and reply to it. Our legal basis is your consent, which you give on the recording page before you submit.

We do not use your voice to build voiceprints, to identify you biometrically, or to train AI models.

4. Place owners

A place owner can claim a place by telling us who they are and how they are connected to it. We use that information solely to decide whether to approve the claim. If approved, we create an account so the owner can read and reply to reviews of that place. Our legal basis for creating and running the owner account is contract. Our legal basis for checking that a claim is genuine is our legitimate interest in preventing false claims.

5. How we use your data

• To publish the voice reviews you have chosen to share, and to record, store, and transcribe them.
• To send you the link that confirms your email address, and to attach your review to your profile once you do.
• To translate transcripts when a reader requests another language.

n

• To read available photo date and location details, suggest visit information, and show restrained supporting-evidence labels.

n

• To combine selected new reviews from people you follow into the optional Heard This Week email when you enable it.
• To group reviews onto a public page for the place they are about.
• To notify a place that it has received a review.
• To let a verified owner reply in their own voice.
• To keep the service secure and to prevent spam and abuse.
• To keep proof of consent.
• To meet our legal obligations.

We use your email address only to confirm it is yours, to sign you in, and in connection with your submission or your account. We do not add you to a mailing list unless you separately ask us to, and we do not sell it, and we share it only with the processors described in Section 9.

6. Our legal bases

• Consent for recording, storing, and publishing your voice review.
• Contract for place owner accounts and the service we provide to places.
• Legitimate interests for security, spam prevention, and operating the platform.
• Legal obligation where the law requires us to keep records.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that already happened.

7. Your review is published in public

A published review is public and can be indexed by search engines. It may show your recording, readable transcript, first name if you gave one, rating for a recent experience, photos, spoken language, and the place you reviewed with its address and map. Past experiences show a month and year instead of a star rating. Exact photo metadata is not published.

Your voice also appears on a public page for the place itself, alongside other people’s reviews of the same place. The place page shows an average of current ratings. Past experiences do not enter that average and do not appear in Discover.

This happens whether or not the place is a Dafado customer. A business does not have to sign up, pay, or agree to anything for a page about it to exist. A business that claims its page gains a right of reply. It does not gain the right to edit or remove your review.

Once something is public on the internet, other people can copy, quote, archive, or share it. We can remove what we control. We cannot guarantee removal of copies made by others.

8. Transcription and translation

Every recording is transcribed automatically so the words can be read as well as heard. Transcription runs on our own server in Germany using open-source speech recognition. Your audio is not sent to a third-party transcription company.

Translation is different. A translation is produced when a reader requests one. To do this, the text of the readable transcript, not your audio, is sent to Anthropic. See International transfers.

Your audio is never altered or translated. It always plays in the language you spoke, in your own voice.

Automated transcripts and translations can contain mistakes. The public page shows a readable transcript, while the unedited transcript is retained as an eligible paid verification layer. The recording itself remains the primary source.

We do not use automated decision-making that produces legal effects about you.

9. Who we share data with

We do not sell personal data. We share it only with the providers who help us run Dafado, and only as far as needed:

Provider	What it handles
Cloudflare	Storage of the audio recordings and photos, content delivery, and security
Hetzner	Website hosting and the server in Germany that produces transcripts
Anthropic	Translation of transcript text, when a translation is requested
Emailit	Delivery of our transactional emails
MXroute	Our own mailboxes, which receive mail you send us
SpinupWP	Management of the Hetzner-hosted WordPress server

These providers act as our processors and may only use your data on our instructions. We may also disclose data where we are legally required to do so, or to protect our legal rights.

10. International transfers

Your recordings are stored and transcribed inside the European Union.

Anthropic is based in the United States. When a transcript is translated, that text is transferred outside the EU. Where that happens we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses. Some of our other providers may also process limited data outside the EU or EEA under the same safeguards.

11. How long we keep data

• Recordings nobody confirms are deleted after 30 days. If you record a review and never confirm your email address, we delete the recording, the photos, and the transcript after 30 days, automatically. You do not have to ask. Until then it stays private and you can still confirm your email to publish it.
• Recordings waiting for a place to publish them are kept while they wait, and are deleted on request.
• Published reviews are kept for as long as the review page remains public.
• Place owner accounts are kept while the account is active.
• Claim records are kept while needed to show why a claim was approved or rejected.
• Consent records are kept for as long as the related recording exists, because they are the proof that you agreed.
• Server and security logs are kept for a limited period and then deleted.
• Backups of our database are kept for about a week on a rolling basis, so we can recover if something goes wrong. A deleted item can remain inside a backup until it cycles out, and after that it is gone for good. We never restore a backup to bring back something you asked us to delete.
• Deleted accounts leave behind only the handle (the @name), kept so nobody else can take it and be mistaken for you. Everything else goes — see section 12.

12. Removing your recording, or your account

You can ask us to remove your recording at any time by emailing privacy@dafado.com. Tell us enough to find it, such as the place and roughly when you recorded.

If the recording has not been published, we delete it. If it has been published, we unpublish the review page, remove your voice from the place page, and delete the recording. Copies that other people have already downloaded or shared are outside our control.

If you have an account, you can do this yourself. You can delete any single review from your profile. To delete the whole account, open your settings and choose Delete your account.

Deleting your account deletes your profile and every voice you have recorded — published or not — along with the recordings, photos and transcripts. Your reviews disappear from the places you reviewed. This cannot be undone, and we cannot get any of it back for you.

We ask you to confirm by email first. We send you a link, and nothing is deleted until you open it. The link works once and expires after an hour. If you never open it, nothing happens.

Backups. Deleting removes your data from Dafado right away. For safety we keep routine backups of our database, and a deleted item may remain inside them for up to a week before they cycle out, after which it is permanently gone. We never restore a backup to bring back something you asked us to delete.

One thing survives. We keep your handle — the @name itself — so that nobody else can take it and be mistaken for you. We keep the handle and the date it was retired. We do not keep your name, your email address, or anything you recorded.

13. Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to erase your data (the “right to be forgotten”);
• restrict or object to how we process your data;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing already carried out.

To exercise any of these rights, email privacy@dafado.com. We may need to verify your identity before we respond. If you have an account, you can exercise the right to erasure yourself, without asking us — see section 12.

You also have the right to lodge a complaint with the Hungarian data protection authority, the National Authority for Data Protection and Freedom of Information (NAIH), at naih.hu.

14. How we protect your data

Recordings are uploaded over an encrypted connection and stored in access-controlled storage. IP addresses are stored hashed, not in the clear. We use reasonable technical and organisational measures to protect personal data. No system is completely secure, so we cannot promise absolute security.

15. Age

Dafado is not directed to children. Recording a review is intended for people who are at least 18, or who have permission from a parent or legal guardian. We do not knowingly collect personal data from children under 16 without appropriate consent. If you believe a child has provided us with personal data, contact us so we can review and, where appropriate, delete it.

16. Cookies

Dafado uses only the cookies it needs to work:

• one that keeps you signed in, if you have an account;
• one that remembers which review you just recorded, so that when you confirm your email we know which recording to attach to you and publish. It lasts 30 days, and it holds a reference to that one recording — nothing else, and nothing about you.

We do not use advertising or tracking cookies, and we do not sell data to advertisers.

17. Changes to this policy

We may update this policy. The updated version will be posted here with a new “Last updated” date. If a change is material we will make reasonable efforts to tell you.

18. Contact us

Rayofla Kft.
1093 Budapest, Közraktár utca 12/B, 3. em. 2., Hungary
Tax number: 27976971-2-43

Privacy: privacy@dafado.com
General: hello@dafado.com
Reporting content: abuse@dafado.com