1. Data We Collect
- Account information: email, full name, account creation date.
- Generation data: prompt text, reference images, settings, generated images.
- Usage data: session duration, IP address (for rate limiting), browser type.
- Payment data: payment metadata processed through our payment provider (card details never reach us).
2. How We Use Your Data
We use the data we collect solely to deliver the service, protect account security, prevent abuse, and run billing and payment processes.
3. Model Training
The reference images and prompts you upload are never used to train models. They are not shared with third parties for marketing purposes.
4. Third-Party Services
- Supabase: account management and database hosting.
- fal.ai: AI image generation infrastructure — prompts and references are sent there for generation.
- CloudFront / fal.media: delivery of generated images over a CDN.
- iyzico: payment processing and 3D Secure verification; card details are stored by iyzico and are not transmitted to Oxava.
5. Data Retention
Generated images and history are kept for as long as your account is active. When an account is deleted, personal data is permanently erased within 30 days.
6. Cookies
We use cookies for session management (Supabase auth cookies) and user preferences (theme, column count). We do not use marketing or tracking cookies.
7. Your Rights (KVKK)
Under Turkey's KVKK (Law No. 6698), you have the right to access, correct, request erasure of, and object to the processing of your data. To exercise these rights, write to info@oxava.co .
8. Security
Data is transmitted over encrypted connections (TLS). Account passwords are stored as one-way hashes. Service account credentials are used on the server side only.