Privacy notice
1. Data controller
[Legal entity name], [address], [contact e-mail]. This entity is the data controller (veri sorumlusu) for the personal data processed through Yaprak.
2. Data we process
- Your chat identifier: the Telegram chat id or the WhatsApp phone number that messages the bot.
- The details you give in the sign-up interview: full name, business name, what the business does, e-mail address and phone number.
- The messages, photos and documents you send to the bot, and the website content generated from them.
- Billing data held by Polar (customer id, e-mail, invoices). Card details never reach Yaprak.
- Technical logs: request metadata, model usage and cost records, error diagnostics.
3. Purposes and legal basis
Building, publishing and maintaining your website; running your account, credits and subscription; sending you service notices in the chat; keeping the service secure and billing correct. The legal basis is the performance of the contract with you and our legitimate interest in operating the service (KVKK art. 5/2, GDPR art. 6/1-b and f); transfers to processors abroad rest on your explicit consent (KVKK art. 9).
4. Processors and transfers
Cloudflare (hosting, storage, AI Gateway), OpenAI and Cloudflare Workers AI (language models reached through the gateway; prompts and responses are not stored there), Polar (merchant of record for payments), Zernio and Meta (WhatsApp delivery), Telegram. These providers run servers outside Türkiye; data is transferred to them only to provide the service.
5. Retention
Your profile is kept while your account exists. Conversation history is kept until you type /clear; a site and its versions are deleted with /delete confirm. Billing records are kept as long as tax law requires.
6. Your rights
Under KVKK art. 11 and GDPR arts. 15–22 you may learn whether your data is processed, request information, correction, deletion or restriction, object to processing and request a copy. Write to the contact address above; in the chat, /profile shows and corrects your details, /clear removes the conversation history and /delete confirm removes your site.
7. Changes
When this notice changes, the version number changes and the bot asks for your consent again before continuing.