Privacy Policy
What data we collect, why we process it and how long we keep it.
Effective date: 2026-07-25
Draft. This policy does not take effect until legal review is complete.
Data we collect
| Category | Example | Source |
|---|---|---|
| Account data | name, email, password hash | from you |
| Brand data | website content, product images, logo, positioning | from you / your site |
| Production data | prompts, generated images and videos, quality scores | from the system |
| Ad data | campaign, ad set, spend and performance metrics | from your connected ad account |
| Technical data | IP, browser, session, error logs | automatic |
Purposes and legal bases
- Performance of contract — account management, creative production, publishing
- Legitimate interest — security, abuse detection, product improvement
- Consent — marketing communication, non-essential cookies
- Legal obligation — invoicing and retention requirements
Model training
We do not use your brand data, product images or generated output to train foundation models, and we do not share them with our subprocessors for that purpose. Data is processed for inference on your account only.
Sharing
Data is shared with subprocessors only as needed to provide the service. It is never sold or rented to third parties.
Retention
- Account and billing data: 10 years after account closure (statutory)
- Brand and production data: 90 days after account closure
- Technical logs: 12 months
Your rights
Your rights under Turkish data protection law (KVKK) and how to exercise them are described in the KVKK notice.
Security
Data is encrypted in transit and at rest; access is restricted by role. In the event of a breach, affected individuals and the supervisory authority are notified within the statutory period.