01Data Controller
Within the scope of this Disclosure Notice, the data controller is DEDE IST CONS - FZCO, the company that operates the humanaizer.io platform. You can direct all your questions to kvkk@humanaizer.io.
02Personal Data Processed
- Identity / contact: full name, email address, country, company name (optional).
- Account security: password digest (hash), session tokens, IP address, browser information.
- Billing: payment provider (Paddle) customer/subscription ID, subscription status, invoices. We do not store card numbers.
- Customer content: texts generated and edited on the Platform, prompt templates, brand kit information.
- Usage data: monthly article count, word count, AI cost used, session logs.
03Purposes of Processing
- To enable your membership and manage your account.
- To provide the service you request: AI content generation, quality control, integration with publishing targets.
- Billing and subscription management.
- Security, fraud prevention, and abuse prevention.
- Anonymized analytics to improve service quality.
- To fulfill legal obligations (billing records, responses to court/legal requests).
04Legal Grounds
Your data is processed based on the following legal grounds: the establishment and performance of the membership agreement (art. 5/2-c), the fulfillment of our legal obligation (art. 5/2-ç), the establishment/exercise/protection of a right (art. 5/2-e), our legitimate interest (art. 5/2-f), and/or your explicit consent (art. 5/1).
05Transfer
Your personal data is transferred to the following parties to the extent necessary to provide the service:
- Cloud infrastructure providers: Supabase (Frankfurt / EU), Hetzner (Germany / EU), Vercel (US/EU).
- Artificial intelligence provider: DeepSeek (China). Prompts sent for generation are processed under DeepSeek's terms of use.
- Payment provider: Paddle.com Market Ltd (Merchant of Record). Card details are processed directly by Paddle and are not stored by us.
- Communication: the SaaS provider we use for support emails (kept confidential; disclosed upon request).
Cross-border transfers are carried out to countries on the list of countries with adequate protection announced by the Personal Data Protection Board, or under standard contractual clauses (SCC) signed with providers.
06Retention Periods
- Active accounts: until the account is closed.
- Personal data after account closure: deleted within 30 days.
- Billing records: retained for 10 years under the Tax Procedure Law.
- Anonymized analytics data: may be retained without a time limit.
07Your Rights (KVKK art. 11)
- To learn what personal data of yours is being processed,
- To learn whether it is being processed and to request information about it,
- To learn the purpose of processing and whether it is used in accordance with that purpose,
- To learn the third parties to whom it is transferred domestically / abroad,
- To request correction if it has been processed incompletely / incorrectly,
- To request its deletion / destruction within the conditions set forth in article 7 of the Law,
- To request that the above demands be notified to the third parties to whom it was transferred,
- To object to a result against you arising from the analysis of the processed data exclusively by automated systems,
- To demand compensation for damages in the event you suffer harm due to unlawful processing.
To exercise the rights above, you may apply to kvkk@humanaizer.io. Your requests are answered free of charge within 30 days.
08Updates
This Disclosure Notice may be updated as needed. Significant changes are communicated to the email address on your account; the current text is always published on this page.
Related Legal Documents
Operated by: DEDE IST CONS - FZCO · PO Box 3420001, Dubai, United Arab Emirates