Privacy and Personal Data Notice

Data controller

Erce Tevlim (Cevizli Mah. Zuhal Cad. A Blok No: 46 İç Kapı No: 50, Maltepe/İstanbul) is the data controller under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") for personal data processed by the AI Yakala service. You can reach us at contact@flowfuser.com.

What data we process

• Account data: your email address and an irreversible hash of your password. We never store the password itself.
• Purchase and usage data: your orders (item, amount, order code, status), your billing details (name or company name, address, the tax office and number for a business invoice, and optionally your Turkish ID number for a personal one), credit and package transactions, what you write in the bank transfer description, and hashes of your API keys.
• Check reports: the name, type, size, SHA-256 fingerprint and analysis result of the files you upload. For text checks, neither the text nor its length or fingerprint is stored.
• Security records: IP address, session data, login attempts and a log of important account actions.

Files and texts you upload

Files and texts are processed only to analyze them and are deleted once the analysis is done; they are not stored on our servers. Location data (GPS) and AI prompts in files are never written into reports.

When you upload files that contain other people's personal data, respecting those people's rights is your responsibility.

Purposes and legal grounds

We process your data on these legal grounds of Article 5(2) KVKK:

• Providing the service, managing your account, adding your credits and packages: performance of a contract (clause c).
• Invoicing, accounting and requests of competent authorities: compliance with our legal obligations (clause ç).
• Account security and prevention of abuse and fraud: our legitimate interest (clause f).

How data is collected

Your data is collected electronically from what you enter on our site and API, and automatically while you use the service (through strictly necessary cookies and server logs).

Disclosure

We do not sell your data or share it for marketing. Our servers are located in: Turkey. Your data may be disclosed only to the hosting provider whose servers we use (as the infrastructure that stores it), to our accountant for accounting and tax purposes, and to competent public authorities on request.

Retention

Your account data and reports are kept while your account is open. If you ask us to delete your account, your data is deleted or anonymized, except records we must keep by law (such as payment and invoice records), which are kept for the period the law requires.

Cookies

We use only two cookies that the site needs to work: "sid", which keeps you logged in (30 days), and "lang", which remembers your language (1 year). We use no advertising, analytics or tracking cookies.

Your rights

Under Article 11 KVKK you have the right to:

• learn whether your personal data is processed and, if so, request information about it;
• learn the purpose of the processing and whether the data is used accordingly;
• know the third parties in Turkey or abroad to whom it is disclosed;
• have incomplete or inaccurate data corrected;
• have it deleted or destroyed under the conditions of Article 7 KVKK;
• have third parties to whom it was disclosed notified of such corrections, deletions or destruction;
• object to an outcome against you that results solely from automated analysis;
• claim compensation for damage caused by unlawful processing.

Requests

Send your requests from the email address registered to your account to contact@flowfuser.com. We answer free of charge within 30 days at the latest.

Security

Connections are encrypted with HTTPS, passwords are stored irreversibly (argon2), and access to data is limited to authorized people.