1. Introduction

BM BİLİSİM LTD. ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use prompthance ("Service").

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Name and email address
• Authentication data (managed by Clerk)
• Payment information (processed by Stripe)
• Account preferences and settings

2.2 Usage Data

We automatically collect:

• Images you upload for analysis
• Generated prompts and analysis results
• Credit usage and transaction history
• Device information and IP address
• Usage patterns and service interactions

2.3 Technical Data

We collect technical information including:

• Browser type and version
• Operating system
• Session data and cookies
• Error logs and performance metrics

3. How We Use Your Information

We use your information to:

• Provide and improve our AI image analysis service
• Process your images and generate prompts
• Manage your account and subscriptions
• Process payments and billing
• Send service-related communications
• Provide customer support
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services:

4.1 Authentication - Clerk

User authentication and account management is handled by Clerk. Please review Clerk's privacy policy for details on how they handle your data.

4.2 Payments - Stripe

Payment processing is handled by Stripe. We do not store your payment card details. Please review Stripe's privacy policy for payment data handling.

4.3 AI Processing - OpenAI

Image analysis is powered by OpenAI's services. Images sent for analysis are processed according to OpenAI's data usage policies.

4.4 Database - Convex

User data and generated content is stored using Convex database services.

5. Data Sharing and Disclosure

We do not sell, trade, or share your personal information with third parties except:

• With the third-party services mentioned above to provide our Service
• When required by law or legal process
• To protect our rights, property, or safety
• With your explicit consent

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encrypted data transmission (HTTPS)
• Secure cloud infrastructure
• Access controls and authentication
• Regular security assessments

7. Data Retention

We retain your data:

• Account data: Until you delete your account
• Uploaded images: For 30 days or until manual deletion
• Generated prompts: Until you delete them or your account
• Transaction records: As required by law (typically 7 years)

8. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data (right to erasure)
• Export your data (data portability)
• Object to processing
• Withdraw consent

9. Cookies and Tracking

We use cookies and similar technologies for:

• Essential service functionality
• User authentication and sessions
• Service preferences
• Analytics and performance monitoring

10. International Data Transfers

Your data may be processed in countries outside the UK. We ensure appropriate safeguards are in place when transferring data internationally.

11. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the updated policy on our website.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us at: