Privacy Policy - AiHane

Effective Date: 04/03/2026
Platform: aihane.com
Contact Email Address: info@aihane.com

1. GENERAL INFORMATION

This Privacy / PDPL Disclosure Notice has been prepared to provide transparent information to natural persons using the AiHane platform regarding the processing of personal data within the scope of the Turkish Personal Data Protection Law No. 6698 (“KVKK”), the European Union General Data Protection Regulation (“GDPR”), and, to the extent applicable, the data protection rules of the United Kingdom.

The following parties are involved in services related to the AiHane platform:

1. 777 Commerce Ltd
Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9J1, United Kingdom
Company No: 155265998

2. Datakale.Net Software & Server Services
Address: Park O'live Evleri, Hamidiye, Damla Sk. D:2 16, 17110 Kepez / Çanakkale Merkez / Çanakkale, Türkiye

Within the scope of AiHane, personal data may be processed for the purposes of providing, operating, improving, and securing the platform, carrying out support processes, managing subscription and payment processes, and fulfilling relevant legal and commercial obligations.

2. CATEGORIES OF PERSONAL DATA PROCESSED

Within the scope of AiHane, the following personal data may be processed:

Identity and account data:
first name, last name, username, membership information

Contact data:
email address, phone number (if any)

Transaction security data:
IP address, session records, device information, operating system information, browser information, log records, security incident records

Usage data:
plan information, subscription status, transaction history, tool usage information, preferences and settings information, frequency of use, service access records

User content:
prompts, message contents, uploaded visuals, audio files, PDF documents, feedback, support records, and other content entered into the system by the user

Financial and commercial transaction data:
subscription information, payment transaction records, invoice information, collection records, transaction status information

Note:
Payment card data and sensitive payment information may also be processed separately within the systems of the payment institution or payment infrastructure provider used. AiHane may not directly store payment card information in all cases.

3. PURPOSES OF PROCESSING PERSONAL DATA

Your personal data may be processed for the following purposes:

creating membership and managing the user account,
providing and maintaining platform services,
operating AI-powered features,
processing files uploaded by the user and providing related service functions,
providing gallery, history records, and user dashboard features,
ensuring system security, preventing abuse, and detecting fraud,
responding to user support requests and conducting communication processes,
carrying out subscription, payment, collection, accounting, and invoicing processes,
product improvement, performance monitoring, debugging, and improving service quality,
fulfilling legal obligations,
managing disputes and establishing, exercising, and protecting rights,
making legal notifications where necessary,
carrying out marketing, campaign, and commercial electronic communication processes with separate consent / explicit consent where required under applicable legislation.

4. METHODS OF COLLECTING PERSONAL DATA

Your personal data may be collected through the following channels by automated or partially automated means:

membership and login forms,
account settings and user dashboard,
in-platform usage activities,
file upload areas,
support and communication channels,
subscription and payment processes,
cookies, SDKs, log systems, and similar technical tools,
security and performance monitoring systems.

5. LEGAL GROUNDS

5.1. Legal Grounds Under the KVKK

Your personal data may be processed based on the following legal grounds pursuant to Article 5 of the KVKK and the relevant legislation:

being directly related to the establishment or performance of a contract,
fulfilling the legal obligations of the data controller,
being mandatory for the establishment, exercise, or protection of a right,
being mandatory for the legitimate interest of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,
your explicit consent where necessary.

5.2. Legal Grounds Under the GDPR / EEA

Personal data relating to users located in the EU / EEA may be processed under the GDPR on the basis of the following legal grounds:

performance of a contract or taking steps requested prior to entering into a contract,
compliance with legal obligations,
legitimate interests,
explicit consent,
in exceptional cases, the establishment, exercise, or defence of legal claims.

The legal basis relied upon for the processing activity may vary depending on the relevant purpose of processing. For example:

membership creation and account operation are mostly based on contract performance,
security logs and abuse prevention are mostly based on legitimate interests,
invoicing and record retention are mostly based on legal obligations,
promotional / marketing messages may be carried out, where required under applicable legislation, on the basis of separate consent / explicit consent or other legal grounds permitted by the relevant legislation.

6. TRANSFER OF PERSONAL DATA

Your personal data may be transferred, limited to the purposes stated above, to the following categories of recipients:

hosting, server, cloud, database, software, and security service providers,
payment, subscription, collection, and financial infrastructure providers,
Stripe and similar third-party payment service providers,
customer support, email, notification, analytics, monitoring, and performance providers,
accounting, audit, legal, and consultancy service providers,
competent public institutions and organisations, regulatory authorities, and judicial bodies,
authorised internal personnel and, where necessary, contractual business partners.

7. INTERNATIONAL DATA TRANSFERS

Within the scope of AiHane’s technical infrastructure, payment systems, software tools, or support services, your personal data may be transferred outside Türkiye, to the United Kingdom, countries of the European Union / European Economic Area, or other countries, or processed in systems located in such countries.

In such cases, appropriate transfer mechanisms are sought to be used in accordance with applicable legislation. Depending on the circumstances, these may include:

transfer to countries subject to an adequacy decision,
standard contractual clauses (SCCs),
contractual safeguards,
service provider data processing agreements,
technical and organisational security measures.

Transfers made to countries for which the European Commission has issued an adequacy decision may, to the extent applicable, be assessed within this framework.

8. RETENTION PERIOD

Your personal data shall be retained only for the period required by the purposes of processing and for the retention periods required under the applicable legislation.

The following criteria may be taken into account in determining the retention period:

the nature of the service,
whether the user account is active,
technical log and security needs,
legal retention obligations,
statutory limitation periods,
the evidentiary need required for resolving possible disputes.

Personal data whose retention period has expired shall be deleted, destroyed, or anonymised in accordance with the relevant legislation.

9. SECURITY MEASURES

AiHane seeks to take reasonable technical and administrative measures to protect personal data against unauthorised access, loss, disclosure, misuse, alteration, or unlawful processing.

These measures may include access control, logging, security monitoring, authorisation, system updates, contractual protections, and other organisational measures deemed necessary.

However, no data transmission over the internet can be guaranteed to be completely risk-free.

10. YOUR RIGHTS UNDER THE KVKK

Pursuant to Article 11 of the KVKK, you have the following rights:

to learn whether your personal data is processed,
to request information if it has been processed,
to learn the purpose of processing and whether it is used in accordance with that purpose,
to know the third parties to whom it is transferred domestically or abroad,
to request correction if it is incomplete or inaccurately processed,
to request deletion or destruction if the relevant conditions are met,
to request notification of correction, deletion, or destruction processes to third parties,
to object to the occurrence of a result against you arising from analysis exclusively by automated systems,
to claim compensation if you suffer damage due to unlawful processing.

11. YOUR RIGHTS UNDER THE GDPR / EEA

If you are located in the EU / EEA or if the GDPR applies to you, you may, subject to applicable conditions, have the following rights:

right of access,
right to rectification,
right to erasure,
right to request restriction of processing,
right to data portability,
right to object,
right to object to decisions based solely on automated processing,
right to withdraw consent for processing based on consent,
right to lodge a complaint with the competent supervisory authority.

Rights under the GDPR are not absolute; each right is subject to the conditions and exceptions under the relevant legislation.

12. DATA PROTECTION REQUESTS AND CONTACT

You may submit your requests regarding your personal data to us via the contact address below:

Email: info@aihane.com

Identity verification may be requested within the scope of your application. Applications are assessed in accordance with applicable legislation and are sought to be responded to within the periods prescribed by law.

13. CHILDREN’S DATA

AiHane is not offered as a service specifically designed for children. Persons under the age required by the applicable legislation must not use the platform, where necessary, without the consent of a parent or legal representative.

14. MARKETING AND COMMERCIAL COMMUNICATION

Promotional, campaign, announcement, or marketing electronic communications are sent with separate consent / explicit consent where required under applicable legislation.

You have the right to stop such communications at any time or update your communication preferences.

15. AMENDMENTS

This text may be updated in line with legislative changes, technical requirements, changes in the service structure, or operational needs. The current text shall become effective as of the date it is published on the platform.