Privacy policy

The data controller is Gelişim Temizlik Maddeleri Ambalaj Gıda İnşaat Sanayi ve Ticaret Limited Şirketi (short: Gelişim Tem Mad Ltd. Şti.). AIizle is a product of the company's Botfusions brand.

Address: Sarıdemir Mah. Limoncu Sok. No:21/3 Eminönü Fatih/İstanbul, Türkiye · MERSIS 0611002739900019 · Tax office / number: Hocapaşa / 6110027399 · Trade registry no. 280891-0 · Phone:+90 850 302 74 60 · Contact: bilgi@aiizle.com (Botfusions contact e-mail: info@botfusions.com).

We process personal data in accordance with the Turkish Law on the Protection of Personal Data No. 6698 (KVKK).

We collect personal data electronically through forms, automatically through the session cookie and server logs, and through PayTR payment notifications and ChatGPT app (MCP) requests.

• Account data: your e-mail address and password and name when you register. Passwords are handled by our authentication provider (Supabase); we do not read them.
• Scan inputs and results: the brand name, competitor names and industry you enter, the questions asked, the answers returned by AI engines, and the resulting scores.
• Content Studio inputs and outputs: the website URL and target query you enter and the articles generated, with their intermediate steps.
• Tracked questions: the brand and questions you choose to track and the check results over time.
• Payment records: order number, product, amount (including VAT), status and payment-provider callbacks. Card numbers are entered on PayTR's payment page and are never received or stored by AIizle. PayTR also receives your name, e-mail address and IP address to process the payment. The information needed for invoicing (name, e-mail) is used. To be able to prove that you approved the Pre-contract Information Form and the Distance Sales Agreement at payment, we also record the time of approval, your IP address and the version of the approved text; for a single scan, we record the time of the performance consent you give when starting the scan.
• Usage counters: number of scans, credits and model cost used per account.
• Support correspondence: messages you send us by e-mail, phone or KEP and our replies.
• Technical logs: server logs kept by our hosting provider (such as IP address, time and requested address).
• Cookies: only strictly necessary cookies (see section 8). We do not use analytics, advertising or tracking cookies.
• Free tools: enter only a brand or business name and industry in the free check and the ChatGPT app; do not enter real persons' names or other personal data.

To create your account, run scans and generate content, take and reconcile payments, issue invoices, answer support requests and keep the service secure. We do not send commercial electronic messages (marketing); we may send only transactional messages such as sign-up confirmation, password reset, and order and refund notices.

The legal bases under KVKK Article 5(2) are: (c) the processing is necessary for the performance of a contract, (ç) it is necessary to comply with a legal obligation (for example accounting and tax records), (e) it is necessary for the establishment, exercise or protection of a right, and (f) it is necessary for our legitimate interests, provided your fundamental rights and freedoms are not harmed (for example security and fraud prevention). We do not rely on explicit consent for the core service. The table shows the basis for each category.

• Supabase (EU, Stockholm — eu-north-1; US-headquartered company): database and authentication.
• PayTR (Türkiye): payment processing.
• OpenRouter (US) and the model providers used through OpenRouter (OpenAI, Anthropic, Google, Perplexity): access to AI models. Brand, competitor and industry names and questions (scan), and site URL and target query (Content Studio) are sent along this chain to obtain answers. The Content Studio model is provided by OpenAI.
• Netlify (US): application hosting.
• Public authorities and judicial bodies authorised by law (on request, under a legal obligation).

We do not sell personal data. Because Supabase, Netlify, OpenRouter and the model providers used through OpenRouter (OpenAI, Anthropic, Google, Perplexity) process data outside Türkiye, your personal data is transferred abroad. For these transfers, the process of signing the standard contracts announced by the Board under KVKK Article 9 with the service providers is under way. This text will be updated when it is completed.

If you use AIizle through a ChatGPT app, the free check tool receives only the brand name, industry and optional language that ChatGPT passes to it. It does not receive your ChatGPT conversation or account. No account is needed and the request and result are not stored in our database. The brand name and industry are sent to OpenRouter and an OpenAI model (via OpenRouter) to ask 6 questions in Turkish. Our hosting provider may keep ordinary technical logs of the request. The legal basis is our legitimate interest (KVKK Article 5(2)(f)).

Account data is kept while your account is active. You can send an account deletion request from your registered e-mail address to bilgi@aiizle.com; it is concluded within 30 days at the latest. Account data, scan results, Content Studio outputs and tracked questions are deleted or anonymised; copies in backups are deleted within the backup cycle.

Payment and invoice records (order number, product, amount, status, payment-provider notifications, approval time, IP address and the version of the approved text) are not deleted even if the account is deleted; they are unlinked from the account and kept only to meet legal obligations and to prove facts in possible disputes, under Turkish Commercial Code Article 82 (10 years) and Tax Procedure Law Article 253 (5 years), for 10 years starting from the year after the record was created, and destroyed at the end of that period.

Technical logs are kept for at most 12 months.

We use only strictly necessary cookies for signing in; no consent is required for them. The legal basis is performance of the contract (KVKK Article 5(2)(c)). There are no analytics, advertising or tracking cookies. The PayTR payment page may use its own cookies on its own domain; these are subject to PayTR's privacy notice.

• sb-<project-ref>-auth-token (may be split into .0, .1 parts) · Purpose: keep you signed in and authenticate you with Supabase · Duration: up to 400 days (removed when you sign out) · Type: strictly necessary, first party.

Under KVKK Article 11 you may ask whether your data is processed, request information about it, learn the purpose of processing and whether it is used accordingly, know the third parties to which it is transferred in Türkiye or abroad, request correction of incomplete or wrong data, request deletion or destruction under Article 7, request that these actions be notified to third parties, object to a result against you produced solely by automated analysis, and claim compensation for unlawful processing.

Applications must be in Turkish and may be made (1) by a wet-signed petition in person or through a notary to the company address (Sarıdemir Mah. Limoncu Sok. No:21/3 Eminönü Fatih/İstanbul); (2) from your KEP address to our KEP address (gelisimtemizlik@hs01.kep.tr); (3) signed with a secure electronic or mobile signature, to bilgi@aiizle.com; or (4) from the e-mail address registered in the system to bilgi@aiizle.com.

The application must include your name and surname, your signature (for written applications), Turkish ID number (nationality and passport number for foreigners), an address for notification, your e-mail address if any, phone number and the subject of the request. We conclude applications free of charge within 30 days at the latest; if the process needs an extra cost, the fee in the Board's tariff may be charged. If you are not satisfied, you may complain to the Personal Data Protection Board under KVKK Article 14.

Under KVKK Article 12 we apply concrete measures: Supabase row-level security (RLS) so each user can access only their own records; TLS encryption for all data in transit; service keys kept on the server only; access limited by authorisation to those who need it; and passwords stored hashed by Supabase Auth (never in plain text). The service is not directed at people under 18. If we find an account belonging to someone under 18, we close it and delete its data under the rules in this policy.

We will update this page and its date when this policy changes.