KVKK Privacy Notice (Türkiye)

Data controller: DevAny LLC, Wyoming, United States. Contact: hello@devany.ai. The company is established outside Türkiye; current identity details appear in the site footer.

Identity and contact: name (if provided), email address, account language.

Account and usage: your apps and briefs, credit balance and spend records, session and security logs (IP, browser info), support correspondence.

Payments: processed by Stripe; your card number never reaches us. We receive transaction amount, date, status and the records required for billing.

Measurement (only with your explicit consent): site and console analytics (Google Analytics, Google Ads conversion). No measurement cookie is written without consent.

Opening your account, providing the service, fulfilling generation requests, billing and support — legal basis: formation and performance of a contract (Art. 5/2-c).

Keeping invoice and transaction records — legal basis: compliance with legal obligations (Art. 5/2-ç) and establishment/protection of rights (Art. 5/2-e).

Service security, abuse prevention, debugging and improvement — legal basis: legitimate interest, provided your fundamental rights are not harmed (Art. 5/2-f).

Usage measurement and marketing communication — legal basis: EXPLICIT CONSENT (Art. 5/1), collected separately; the service is never conditioned on it and you may withdraw at any time.

Data is collected electronically through signup and login forms, your actions in the console, support channels, and automatically while the service runs (server logs, cookies).

Data is shared with our subprocessors to the extent needed to run the service: hosting and database (Supabase, Cloudflare), payments (Stripe), email delivery (Resend), error monitoring (Sentry), and the AI providers that fulfil generation requests. The current list is published on the Subprocessors page.

Because the company and its infrastructure providers are established outside Türkiye, your data is processed ABROAD. The basis for this transfer under KVKK Art. 9 is that the transfer is necessary for the performance of the contract by its very nature, together with the transparent notice given here; our alignment with Art. 9 mechanism requirements is being carried out with legal counsel and this notice will be updated if the mechanism changes.

AI providers receive the content needed to fulfil your request; a privacy option asking providers not to train on your business data is on by default.

Data collected by an app you build with DevAny (e.g. your customers' booking records) belongs to YOU: you are the controller of that data and DevAny acts as your processor, using it only as your app's operation instructs.

Informing your own end users is your obligation; you can lock collections that gather personal details from the panel and export records. See the Subprocessors and Data Processing page.

Account data is kept while your account is open. When you delete your account, account and app data are deleted; invoice and transaction records, and records we are legally required to keep, are retained for the statutory periods and then destroyed.

Server and security logs are kept for limited, reasonable periods; measurement data follows the provider's retention settings.

You may: learn whether your data is processed; request information; learn whether it is used in line with its purpose; know the third parties it is transferred to in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction; request notification of these operations to transferees; object to a result arising against you from analysis exclusively by automated systems; and claim compensation for damage caused by unlawful processing.

In addition: we do not carry out solely automated decision-making or profiling, and you may withdraw any consent at any time with future effect.

Send your application from the email address linked to your account to hello@devany.ai with the subject "KVKK request". Applications are answered free of charge within 30 DAYS at the latest, in line with the Communiqué on Application Procedures.

If your application is rejected, answered insufficiently or not answered in time, you retain the right to lodge a complaint with the Turkish Personal Data Protection Board.