Privacy Policy

1. Data Controller

Flexorch Technology acts as the data controller under applicable data protection laws, including the Turkish Personal Data Protection Law (KVKK) and the EU General Data Protection Regulation (GDPR). The company is in the process of formal registration; this notice will be updated with legal address details once registration is complete. Contact: [email protected]

2. Personal Data We Process

• Account data: email address.
• Security identifier: API key — stored as SHA-256 hash only; raw key is never retained.
• Uploaded documents: content of PDF, DOCX, or TXT files processed to deliver the service.
• Usage data: job counts, credit consumption, timestamps.
• Technical data: IP address and session data within server security logs.

3. Purposes and Legal Bases

• Account management and service delivery — KVKK Art. 5/2-c / GDPR Art. 6(1)(b): contract performance.
• Billing and payments — KVKK Art. 5/2-ç / GDPR Art. 6(1)(c): legal obligation.
• Security and abuse prevention — KVKK Art. 5/2-f / GDPR Art. 6(1)(f): legitimate interests.
• Product improvement and support — KVKK Art. 5/1 / GDPR Art. 6(1)(a): consent given at signup.

4. International Data Transfers

To deliver the service, personal data is processed on infrastructure operated by Hetzner Online GmbH in Germany. Germany is subject to the EU GDPR, which provides a level of protection meeting or exceeding KVKK requirements. Transfers are made in compliance with KVKK Article 9 standard contractual clauses (SCM). Hetzner ISO 27001-certified data centres satisfy the applicable technical requirements under GDPR.

5. Retention Periods

• Account and document data: for the duration of active subscription and 90 days after termination.
• Billing and accounting records: 10 years (statutory requirement).
• Server security logs: 90 days.

6. Your Rights

• Know whether your personal data is processed and request information about it.
• Learn the purpose of processing and whether it is used accordingly.
• Know third parties to whom your data has been transferred.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction of your data under applicable conditions.
• Object to automated decisions that adversely affect you.
• Claim compensation for damages arising from unlawful processing.
• Submit requests to: [email protected]

7. Analytics and Cookies

Flexorch uses self-hosted Umami Analytics for anonymous traffic analysis. No third-party advertising or tracking cookies are used.

8. Changes

Updates to this policy will be published on this page. Material changes affecting your personal data will be communicated by email.