Privacy policy

This policy explains which of your personal data is processed when you use the Stiloir website (https://stiloir.space) and the Stiloir iOS/iPadOS app, why it is processed, who it is shared with, and what your rights are. The details under KVKK (Turkish Personal Data Protection Law No. 6698) are in the KVKK notice, and browser storage is covered in the Cookie and local storage policy.

Data controller

Stiloir (individual developer, Türkiye). For any privacy question or request: hello@stiloir.space.

What data do we process?

• Account: your email address, your display name, your Stiloir user id and your sign-in method (Sign in with Apple, email and password, or Sign in with Google on the web). Your password is not stored in plain text.
• Content: your boards, the images you upload, your AI prompts, the questions you ask the Assistant and the generated images.
• Research: your research topics, your report settings and the results of your report runs.
• Credit usage: which action used how many credits, and when.
• Subscription: the status of your Apple subscription: the original transaction id Apple issues, the product and the expiry date. Your card or payment details never reach Stiloir; Apple takes the payment.
• Technical logs: technical logs of requests (IP address, date and time, error details), to keep the service running securely and to prevent abuse.

Why do we process it?

• To open your account, keep you signed in and provide the service: the formation and performance of a contract (KVKK art. 5/2-c).
• To run your subscription and credits: the performance of a contract (KVKK art. 5/2-c).
• To protect the security of the service and prevent abuse: legitimate interest (KVKK art. 5/2-f).
• To meet legal obligations: KVKK art. 5/2-ç.

Stiloir shows no ads, does not track you, does not sell your data and does not build advertising profiles.

Who do we share it with?

Data is shared only to provide the service, with the service providers below, and only as far as needed:

• Supabase (database, authentication and file storage): runs on a server rented from Hostinger that Stiloir manages itself.
• OpenRouter: AI text and image generation. When you generate an image, your prompts and reference images are sent; when you ask the Assistant a question, your questions are sent. When you analyze a board on the web, the board's title and the images on the board are sent. On every research run, your research topic, your report settings and the web results found are also sent, so it can write the short summary.
• Tavily: web search. Your research topics and search queries are sent.
• Resend: transactional emails such as account verification and password resets.
• Zoho: the support mailbox (hello@stiloir.space).
• Apple: in-app purchases, subscriptions and Sign in with Apple.
• Google: authentication, if you sign in with Google on the web.

Scheduled research sends your research topic to Tavily, and the topic and the web results found to OpenRouter, even when you do not open the app.

Some of these providers process data outside Türkiye; the transfer is limited to the data the service in question needs in order to work.

News publishers and Pinterest: some images in Discover, Insights and Reports load straight from the news publisher's image server. The Pinterest topic images shown in the magazine in Reports (the Daily Issue and personal reports) also load from Pinterest's image server. When they do, your browser sends your IP address and browser details to that server (the referring address is not sent). These servers belong to the publishers or to Pinterest and may be outside Türkiye.

Pinterest data

Insights, Insights › Trend desk and the magazine in Reports show Pinterest Trends data read from the Pinterest API. Discover has no Pinterest content.

• What is read: only aggregated trend data: the relative search interest and growth of keywords, featured topics and their images, editorial articles, growing shopping categories and their aggregated age and gender breakdown. No Pinterest user's personal data, boards or pins are read.
• Account connection: the only account connected to Pinterest is the Stiloir administrator's OAuth connection; the access keys are kept only on Stiloir's server. Your Pinterest account is not connected to Stiloir, and you are never asked to sign in to Pinterest.
• Storage: Pinterest data is not written to a database or to disk; the server keeps it in memory for at most 6 hours. Report runs store no Pinterest data; the Pinterest page in the magazine is read live every time it opens.
• Sharing: Pinterest data is not shared with third parties; it is not sent to OpenRouter either when AI readings and research summaries are written. AI readings are written only from Stiloir's own pool of publications.
• Links to Pinterest: every keyword, category and topic links to a Pinterest search, and every pin image links to its pin on Pinterest. The Pinterest sections say "Source: Pinterest".

Cookies and browser storage

Stiloir uses no advertising or tracking cookies. Browser storage is used only to keep you signed in, to remember your interface preferences (such as the filters you choose) and, when your connection drops, to hold your board changes until they are saved. Details: Cookie and local storage policy.

How long do we keep it?

• Your account and content data are kept for as long as your account is open.
• Report runs are deleted automatically after 90 days.
• When you delete your account, your boards, images, research, reports, credit records and account are deleted; your Apple subscription record is unlinked from your account.
• Records that are subject to a legal retention obligation are kept only for as long as that obligation lasts.

Deleting your account

You can delete your account at any time: in the iOS/iPadOS app under Account > Delete account, and on the web under Profile > Delete account. Deleting your account does not cancel your Apple subscription; you need to cancel it separately on your iPhone or iPad under Settings > your name > Subscriptions or in the App Store subscription settings.

Your rights under KVKK

Under article 11 of KVKK, you have the right to learn whether your data is processed, to request information, to learn the purpose of the processing, to know who your data has been transferred to, to ask for incomplete or inaccurate data to be corrected or deleted, to object, and to ask for compensation if you have suffered damage. Write your request to hello@stiloir.space from your account's email address; it is answered within 30 days at the latest.

Security

Connections are encrypted with HTTPS. Your data is accessed only to run the service, to answer support requests or to meet a legal obligation.

Changes

If this policy changes, the current version is published on this page with its date. For the terms of use, see the Terms of use.