Security Policy

Secure connection

AI Yakala (https://aiyakala.com) works only over an encrypted connection (HTTPS). Everything sent between your browser and our servers, including your login details and the files you upload, is encrypted.

Payment security

Payments are currently made by bank transfer; the site never asks for or processes card details.

When card payment is offered, it will be taken on the secure payment system of a payment institution licensed by the Central Bank of the Republic of Turkey under Law No. 6493, with 3D Secure verification. Your card details never reach our servers and are not stored by us.

Account security

• Your password is stored as an irreversible argon2id hash; not even we can see the password itself.
• Your session is kept in a cookie that scripts on the page cannot read (HttpOnly) and that is sent only over encrypted connections. The database keeps only a hash of the session key.
• Many wrong login attempts in a short time are blocked for a while.
• Only a hash of each API key is stored; the key itself is shown once, when it is created.
• Important actions such as logins, purchases and API key changes are logged for security.

Files you upload

Files and texts are processed only to be analysed and are deleted when the analysis ends; they are not kept on our servers. Details are in the Privacy and Personal Data Notice.

What we never ask for

We never ask for your password or card details by email, phone or message. If you get such a request, do not answer it and report it to contact@flowfuser.com. Do not share your password, and do not reuse a password you use on other sites.

Reporting a vulnerability

If you think you have found a security vulnerability on the site, write the details to contact@flowfuser.com. We will look into it and get back to you; please do not disclose it publicly until it is fixed.