KVKK notice

Under article 10 of KVKK (Turkish Personal Data Protection Law No. 6698), this notice explains how your personal data is processed when you use the Stiloir website (https://stiloir.space) and the Stiloir iOS/iPadOS app. For the general picture, you can also see the Privacy policy.

Data controller

Stiloir (individual developer, Türkiye). Contact: hello@stiloir.space.

Personal data processed

• Identity and contact: your display name and your email address.
• Account: your Stiloir user id and your sign-in method (Sign in with Apple, email and password, Sign in with Google on the web). Your password is not stored in plain text.
• Content: your boards, the images you upload, your AI prompts, the questions you ask the Assistant and the generated images.
• Research: your research topics, your report settings and the results of your report runs.
• Customer transaction: your credit usage and the status of your Apple subscription (the original transaction id Apple issues, the product and the expiry date). Your card or payment details are not processed; Apple takes the payment.
• Transaction security: technical logs of requests (IP address, date and time, error details) and session details.

Purposes of processing

• To open your account, keep you signed in and verify your identity.
• To provide the service: Discover, Insights, boards, AI image generation and research.
• To run your subscription and credits.
• To send transactional emails such as account verification and password resets, and to answer support requests.
• To keep information secure and to prevent abuse.
• To meet legal obligations and to protect rights in possible disputes.

Legal grounds

Your personal data is processed on the following grounds in article 5(2) of KVKK:

• It is necessary for the formation and performance of a contract (art. 5/2-c): account, service, subscription and credits.
• The data controller meeting its legal obligation (art. 5/2-ç).
• Establishing, exercising or protecting a right (art. 5/2-e).
• Legitimate interest, provided that it does not harm your fundamental rights and freedoms (art. 5/2-f): the security of the service and preventing abuse.

Stiloir shows no ads, does not track you, does not sell your data and does not build advertising profiles.

Transfers, including transfers abroad

Data is transferred to the service providers below only to provide the service, and only as far as needed. Some of these providers may process data on servers outside Türkiye:

• Server rented from Hostinger: the Supabase that Stiloir manages itself (database, authentication, file storage) runs on this server; account, content, research and credit data are kept here.
• OpenRouter: AI text and image generation; when you generate an image, your prompts and reference images are sent, when you ask the Assistant a question, your questions are sent, and when you analyze a board on the web, the board's title and the images on the board are sent. On every research run, your research topic, your report settings and the web results found are also sent, so it can write the short summary.
• Tavily: web search; your research topics and search queries are sent.
• Apple: in-app purchases, subscriptions and Sign in with Apple.
• Resend: transactional emails such as account verification and password resets; your email address is sent.
• Zoho: the support mailbox (hello@stiloir.space); the emails you write to us.
• Google: authentication, if you sign in with Google on the web.

News publishers and Pinterest: some images in Discover, Insights and Reports load straight from the news publisher's image server. The Pinterest topic images shown in the magazine in Reports (the Daily Issue and personal reports) also load from Pinterest's image server. When they do, your browser sends your IP address and browser details to that server (the referring address is not sent). These servers belong to the publishers or to Pinterest and may be outside Türkiye. The aggregated trend data read from Pinterest is not stored and is not shared with anyone; details are in the Pinterest data section of the Privacy policy.

Scheduled research sends your research topic to Tavily, and the topic and the web results found to OpenRouter, even when you do not open the app. Before you use the AI features for the first time, the iOS/iPadOS app explains that your prompts, images and Assistant questions are sent to the AI provider, your research topics to the web search provider, and, on every research run, the web results found for the topic to the AI provider for the short summary, and asks for your consent.

How data is collected

Your personal data is collected electronically through the website and the iOS/iPadOS app: through the information you enter when you create an account and sign in, on boards, in AI generation and in research; through Apple's subscription notifications; through the emails you write to us; and through the technical logs created automatically while the service is used.

Retention period

Data is kept for as long as the purpose of processing requires: your account and content data for as long as your account is open; report runs for 90 days. When you delete your account, your data is deleted. Details are in the Privacy policy.

Your rights under article 11 of KVKK

• To learn whether your personal data is processed,
• To request information about it if it has been processed,
• To learn the purpose of the processing and whether the data is used in line with that purpose,
• To know the third parties in Türkiye or abroad to whom it has been transferred,
• To ask for it to be corrected if it has been processed incompletely or inaccurately,
• To ask for it to be deleted or destroyed under the conditions in article 7 of KVKK,
• To ask for the correction, deletion or destruction to be notified to the third parties to whom the data was transferred,
• To object to a result against you that arises from the analysis of the processed data exclusively by automated systems,
• To claim compensation if you suffer damage because of unlawful processing.

Requests

Write your requests to hello@stiloir.space from the email address of your Stiloir account; use your account's email so that we can verify who you are. Your request is answered free of charge within 30 days at the latest. If you find the answer insufficient or do not get an answer in time, you can file a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) (KVKK art. 14).