KVKK Disclosure Notice

1. Data controller

The identity, registered address and contact details of the data controller are shown in the “Service operator” block at the bottom of this page.

2. Personal data processed

• Identity and contact: the name and email address given when creating an account.
• Transaction security: the hash of your password, session and API key records, IP address, request time and rate-limit counters.
• Customer transactions: order records, credits purchased, amount and payment status. Card numbers are never passed to or stored by the controller.
• Query content: names and optional country supplied to the API or in a batch file. Uploaded files are kept for 7 days as stated in the Privacy Policy.
• Support correspondence: the message and contact details you send through the support form.

3. Purposes of processing

• Opening the account, authenticating the user and providing the service.
• Running order and payment processes and tracking the credit balance.
• Preventing abuse, fraud and quota circumvention, and keeping the system secure.
• Answering support requests and sending mandatory service notices.
• Meeting legal obligations and protecting rights in a possible dispute.

4. Legal grounds

Personal data is processed on the following grounds under Article 5 of the Law:

• Directly related to the conclusion or performance of a contract (Art. 5/2-c): account, order and credit operations.
• Compliance with a legal obligation of the controller (Art. 5/2-ç): record-keeping and retention duties.
• Necessary for the establishment, exercise or protection of a right (Art. 5/2-e): dispute and chargeback processes.
• Legitimate interest (Art. 5/2-f): security logs, abuse prevention and keeping the service sustainable.
• Explicit consent (Art. 5/1): only for non-essential processing — analytics cookies and sending a name to the AI subprocessor. Consent can be withdrawn at any time from the panel.

5. Transfers

Personal data is transferred to service providers only as far as providing the service requires: hosting and infrastructure, email delivery, the payment institution, error monitoring and — only with your explicit consent — the analytics provider and the AI subprocessor.

Some of these providers are located abroad; transfers are made within the framework of Article 9 of the Law and only to the extent the service requires. The current list of providers and their purposes is in the Privacy Policy.

Personal data is never sold or rented to third parties for marketing.

6. Retention periods

Account data is kept while the account remains open. After a deletion request, records subject to a statutory retention duty — such as order and payment records — are kept for the period the applicable legislation requires, and for that purpose only.

Uploaded input and result files are deleted after 7 days. Security and rate-limit records are short-lived and limited to their purpose.

7. Data subject rights

Under Article 11 of the Law you may apply to the data controller to:

• Learn whether your personal data is processed and request information if it is.
• Learn the purpose of processing and whether the data is used accordingly.
• Know the third parties in Türkiye or abroad to whom the data is transferred.
• Request rectification of incomplete or inaccurate data.
• Request erasure or destruction under the conditions of Article 7.
• Request that rectification, erasure or destruction be notified to third parties to whom the data was transferred.
• Object to a result reached against you solely through automated analysis.
• Claim compensation for damage suffered because of unlawful processing.

8. How to apply

Send your request, together with information establishing your identity and in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, to the email address below or in writing to the registered address shown at the bottom of this page. Your request will be concluded within 30 days at the latest.

If your request is refused, the response is inadequate or no response is given in time, you may file a complaint with the Turkish Personal Data Protection Board.