Privacy Notice (KVKK)

1. Data controller

The data controller is LeadFab Reklam Hizmetleri Limited Şirketi ("Peritara", "we"), Central Registry (MERSİS) no 0008079813600013, İstanbul Ticaret Odası registry no 858322-0, Maslak Tax Office no 0080798136, address Yeşilce Mah. Diken Sok. Beyazhan No: 4 K: 4, 4. Levent, Kağıthane / İstanbul, Türkiye, email [email protected], phone +90 212 284 44 49.

2. What we process

Only what the service needs:

• Identity and contact: name, email, phone (if provided), profession, city.
• Payment and invoicing: name and surname, Turkish ID number, phone, billing address, and — if you ask for a company invoice — company name, tax office and tax number; the plan purchased, payment records (amount, date, transaction number) and the time and IP address of the confirmations you give at the purchase step. Your card details never reach us; they are entered and processed on the payment institution's secure payment form.
• Account and content data: the social accounts and website you share; the title, caption, date and engagement counts of your public posts.
• Audio and video: the video you record, audio-only narration if you choose that format, and the speech transcript derived from them.
• Team record: the email address and role of anyone you invite to your account, and a log of what they did.
• Security: IP address, request time, rate-limit counters.
• Request content: the message you write in the contact form.

3. Purposes

• Producing your visibility report and a content recommendation specific to you.
• Editing, captioning and delivering your video.
• Publishing to your connected accounts, if you allow it.
• Answering your request, forming the contract and invoicing.
• Collecting the subscription fee, running monthly renewals, and handling cancellation and refund requests.
• Preventing abuse and meeting our legal obligations.

4. Legal bases

Necessity for the conclusion and performance of a contract (Art. 5/2-c); compliance with a legal obligation (Art. 5/2-ç); our legitimate interests, provided your fundamental rights are not harmed (Art. 5/2-f). For social account analysis and marketing communication we rely on your EXPLICIT CONSENT (Art. 5/1), which you may withdraw at any time.

5. Special rules for social media analysis

• We analyse only an account you have declared to be YOURS. No declaration, no analysis.
• We never collect comments. Comments are third parties' data and we have no lawful basis for them.
• We look only at public post metadata: title, caption, date, engagement counts.
• We do not download media files from connected accounts.
• Raw analysis data is deleted within 24 hours; only the resulting report is kept.
• Permission to publish is asked separately from permission to read.

6. Recipients

We do not sell data. A limited set of processors act on our instructions:

• Hosting and file storage (Vercel Inc.).
• Database infrastructure (Supabase Inc.) — your account, content and measurement records are held there.
• AI services: text generation and analysis (Anthropic PBC), speech-to-text (OpenAI, L.L.C.).
• Social inventory collection (Apify Technologies s.r.o.).
• Content delivery and attack protection (Cloudflare, Inc.) — every request to the site passes through it.
• Abuse counter (Upstash, Inc.) — only a shortened digest is written; your IP address is not sent.
• Social publishing infrastructure (Zernio) — when you grant publish permission, your connected account's access token is stored there and the post is delivered through it to the platform's official API.
• Advertising measurement (Meta Platforms Ireland Limited) — ONLY if you consented to cookies. Without consent no data reaches Meta; with consent, your steps on the site and, if you subscribe, the amount paid are transferred.
• Payment institution (iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. (iyzico), Türkiye) — to take payment, process card details and run subscription renewals. Your card details are processed only by this institution.
• Competent public authorities, upon lawful request.

7. Retention

• Raw social analysis data: 24 hours at most.
• Demo records and demo video: 30 days.
• Account and content data: while your membership lasts, plus 1 year.
• Invoices and accounting records: 10 years, as required by law.
• Details from payment attempts that were not completed: 30 days.
• Consent records: a reasonable period after withdrawal, for evidentiary purposes.

8. Your rights

Under Art. 11 of the KVKK you may request to:

• Learn whether your data is processed and obtain information about it.
• Learn the purpose and whether it is used accordingly.
• Know the third parties to whom it is transferred, at home or abroad.
• Have incomplete or inaccurate data corrected.
• Have it erased or destroyed where the conditions are met.
• Have corrections and erasures notified to third parties.
• Object to a detrimental result produced solely by automated analysis.
• Claim compensation for damage caused by unlawful processing.

9. How to apply

Write to [email protected] or to Yeşilce Mah. Diken Sok. Beyazhan No: 4 K: 4, 4. Levent, Kağıthane / İstanbul, Türkiye. We conclude applications within thirty days, in line with the Communiqué on Application Procedures. Your application must contain information allowing us to verify your identity.