Privacy Policy

At Sözleşmeler, we take your privacy seriously. This policy explains how your personal data is processed while you use our platform.

Data controller: ECLABS YAZILIM — Şeyma Karaş (sole proprietorship registered in the Turkish craftsmen register). Address: Bahçelievler Mah. Şehit Ahmet Akyol Sk. No: 31, İç Kapı No: 1, Serdivan/Sakarya. Tax office: Gümrükönü. Contact: iletisim@sözlesmeler.com.tr.

1. Document form data — never stored on our servers

Information you enter into document forms (name, address, ID/tax number, contract details, etc.) is processed only in your browser. This data:

• Is never sent to our servers
• Is never stored in a database or file system
• Is never kept in localStorage, sessionStorage or cookies (see the CV builder exception below)
• Is never written into URL parameters
• Is never shared with third parties for analytics or advertising purposes

Form data is lost when you close or refresh the page. Your information is processed on your device and is not saved.

Exception — CV builder: so that you do not lose your work, the information you type into your CV (name, contact details, experience, photo, etc.) is saved only in your browser's local storage (localStorage, key sozlesmeler:cv-builder:v1) and is never sent to our server. This record stays on your device until you use “Clear form” in the CV builder or clear your browser data. If you are on a shared device, we recommend deleting it when you are done.

2. Document and image generation

PDF and Word downloads are generated entirely client-side, on your device. Generated files are saved only to your own device.

In our browser-based image tools, the photos you select, the previews generated from them, and the resulting outputs are processed only in your browser's memory, on your device. The background-removal model also runs on your device; your image is never sent to our server or to a third-party processing service for this operation. Temporary browser buffers are cleared when the page is closed, and the output is only saved to your device through a download that you initiate.

For the background-removal tool's normal daily usage limit, only the day and the number of completed operations are kept in your browser's localStorage. This counter is not used during an admin session. This record contains no image, user identity or document content, and it is never sent to our server.

For tool usage statistics, only a fixed tool name, event type and success status are sent to our own server as an anonymous count. Images, file names and user identity are never included in this record.

Exception — AI ad creative tool: if you use “Analyze with AI” in the AI ad creative tool and tick the transfer consent, low-resolution copies of your screenshot and uploaded images, together with the app name and description you typed, are sent through our server to Google LLC’s Gemini API to generate copy and template suggestions. Google’s servers may be located in the USA; under KVKK Art. 9 this is a cross-border data transfer. Images are not stored permanently on our server; only the analysis result (not the images) is cached for up to 6 hours. Make sure the images contain no personal data (faces, names, phone numbers, e-mails, etc.). Without consent the tool works in manual mode and sends nothing.

3. Server logs

When you visit the website, our hosting provider may keep standard access logs (IP address, browser type, request time). These logs do not contain form content.

4. Cookies

For details on cookie use, see our Cookie Policy page.

5. Third-party services

The Google AdSense script is not currently loaded. If ad display is enabled in the future, the script will be loaded only after you give explicit consent to advertising cookies. Form data is never shared with ad providers.

6. Contact and feedback messages

When you use the contact or feedback form, the message you write and any optional contact details you provide are stored for 365 days in a D1 database (ECLABS internal retention policy), in order to carry out the support process; expired records are deleted periodically. Admin email notifications are processed via Resend. To prevent abuse, Cloudflare Turnstile verification is performed, and a non-reversible, anonymous rate-limit key is generated from your IP address (kept for 30 days from last use); the raw IP address and the Turnstile verification token are never written to the message record.

7. Your rights

Since document form data is never processed on our servers, no access or deletion request is needed for that data. For our disclosure notice under Turkish Law No. 6698 on the Protection of Personal Data (KVKK), see our KVKK Notice page. For general privacy questions, you can use our contact form or email iletisim@sözlesmeler.com.tr. Other retention periods and the application procedure under KVKK Art. 11 are set out in the KVKK Notice.

8. Changes

This policy may be updated. The current version is always published on this page.