This Notice has been prepared by SEMA KÜPÇÜ, acting as data controller, pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK), regarding the processing of personal data of users of the Oxava platform.
1. Data Controller
Your personal data is processed by SEMA KÜPÇÜ (Tax No (VKN): 5530716806, address: Cumhuriyet Mah. Dr. Kâmil Sk. No: 19 İç Kapı No: 3, Adapazarı / Sakarya, Turkey) acting as the data controller, for the purposes and on the legal grounds described below.
2. Personal Data Processed
We process identity and contact data (name, email), account and membership data, generation data (prompt texts, uploaded reference images, generated content), transaction security data (IP address, session logs), and payment metadata processed via the payment provider. Your card details are not stored by us.
3. Purposes of Processing
Your data is processed to provide the service, create and manage your account, carry out payment and billing processes, ensure account security and prevent abuse, fulfil legal obligations, and respond to your requests and complaints.
4. Legal Grounds
Under Article 5 of the KVKK, your personal data is processed based on the establishment and performance of a contract, compliance with a legal obligation, the establishment of a right, legitimate interest, and where necessary, your explicit consent.
5. Transfer of Data
Your data may be transferred, only to the extent necessary and in compliance with the legislation, to the hosting, image/video generation infrastructure (fal.ai), email, and payment service providers used to deliver the service. Cross-border transfers are carried out in accordance with Article 9 of the KVKK.
6. Method of Collection
Your personal data is collected electronically through the membership form, your use of the platform, and cookies, by automated and partially automated means.
7. Your Rights under Article 11 of the KVKK
You have the right to learn whether your data is processed, request information, learn the purpose of processing, request correction of incomplete or inaccurate data, request erasure or destruction where conditions are met, request restriction of processing, and claim compensation for any damage suffered.
8. Contact
You can submit your requests under the KVKK to info@oxava.co. Applications are concluded as soon as possible and within 30 days at the latest.
This text is a standard template and should be reviewed by legal counsel before going live; the bracketed fields must be filled with the real company details.