Privacy Policy
1. Data We Collect
We process only the data needed to deliver the service. The categories processed today are:
- Account data: your email address, display name and profile picture if any.
- Generation data: the prompts you write, the files you upload and the outputs produced.
- Transaction data: your Gems balance, spending and refund records.
- Technical data: IP address, browser and device information, error logs, request timestamps.
- Optional measurement data: page views and speed metrics — ONLY if you consented to measurement in the cookie banner.
2. Why We Process It
To open your account and keep you signed in, to generate the content you ask for, to keep your Gems balance correct, to prevent abuse and fraud, to detect and fix errors, and to meet our legal obligations.
We do not use your prompts for advertising and we do not sell them to third parties.
3. Service Providers (Data Processors)
We rely on the following providers to deliver the service. Each processes only the data required for its own purpose and acts on our instructions.
| Provider | Purpose | Data processed |
|---|---|---|
| Vercel (USA) | Serving the website, caching and security | IP address, browser information, request logs |
| Railway (USA) | Hosting the application servers | Request logs, account identifier |
| Supabase (EU/USA) | Authentication and database | Email, account details, generation records, balance |
| Cloudflare R2 and Bunny CDN (global) | Storing and delivering media files | Images, video and audio you upload or generate |
| Runware (EU/USA) | Running text, image, video and 3D generation | Your prompt and any file you upload |
| ElevenLabs (USA) | Voice and audio generation | The text to be spoken |
| Sentry (USA) | Collecting error and crash reports | Error record, page and browser information, account identifier |
| Langfuse (EU) | Tracing AI calls and tracking cost | Prompt text, model name, duration and cost |
| Vercel Analytics (USA) | Page views and speed measurement | Anonymous usage statistics |
Measurement (last row) runs only if you consented in the cookie banner; if you decline, that code is never loaded. Runware is an AI broker and forwards your prompt to its contracted model providers; which model runs is shown on the service page before you generate.
4. International Transfers and Explicit Consent (KVKK art. 9)
The providers listed above operate servers outside Türkiye. Your account data, prompts, uploaded files and technical logs are therefore transferred abroad.
This transfer is technically necessary: AI generation, media storage and hosting are not available domestically.
You are asked for explicit consent to this transfer when you create an account. You may withdraw consent at any time; because the generation services cannot technically be provided without it, withdrawing consent closes your account and your data is deleted per the "Retention" section.
To withdraw consent, use the "KVKK request" channel on our contact page.
5. Cookies
There are only two cookie categories on this site. We use no marketing or advertising trackers.
- Essential cookies: required to keep you signed in, remember your language and secure the site. They cannot be turned off.
- Measurement cookies: page views and speed metrics. OFF by default; they run only if you explicitly consent.
The "Decline" option in the cookie banner carries the same weight as "Accept"; you do not have to open settings to decline. To change your decision later, clear this site's data in your browser — the banner will ask again.
6. Retention
Your account data and generated content are kept while your account is open. When you delete your account, account data and media files are deleted.
Payment and invoice records cannot be deleted under tax law and are kept for the statutory period (currently ten years). Security and abuse logs are kept for at most twelve months.
7. Security
Data is encrypted in transit with TLS; passwords are stored in an irreversible form. The admin interface sits behind a separate authentication layer and access is logged.
No system is absolutely secure. If we detect a breach affecting your personal data, we notify the Turkish Personal Data Protection Authority and the affected users as required by KVKK art. 12.
8. Your Rights
Under KVKK art. 11 you have the right to access, correct, delete and restrict the processing of your data, and to object to transfers. You can exercise these rights through the request channel on the KVKK Disclosure page.