BostaDurmasin.com

Privacy and Cookie Policy

Last Updated: June 29, 2026 | Compliant with KVKK & Global Privacy Principles

Welcome to BostaDurmasin ("Platform"). We highly value your data privacy and digital hygiene. This comprehensive document details how we collect, store, share via AI proxy connections (Google Gemini, Groq Llama), and secure your personal data in strict compliance with the Turkish Law on Protection of Personal Data No. 6698 ("KVKK").

1. Data Controller Information

In accordance with the KVKK, the entity processing your data is:

  • Data Controller: BostaDurmasin Operations & Development Team
  • Contact Channel: Via the integrated contact systems on the platform
  • Platform Jurisdiction: Republic of Türkiye

2. Personal Data Processed & Storage Scope

When you interact with our Prompt Studio, SEO Analyzers, or upload assets, various components are processed to parse optimal prompt outputs:

Data Group Specific Attributes Collected AI Execution Form
Input Credentials Raw Text Inputs, Custom Prompts, Brand Metrics, Slogans, Keywords. Processed via real-time system instruction matrices.
Visual Assets Uploaded Reference Images, Base64 String Encoded Textures. Converted instantly via server-side base64 stream to vision modules.
Technical Logs IP Address, Device Metadata, Network Headers, Security Nonces. Utilized strictly for API request limiting and DDoS protection layers.

Your personal data is handled under explicit legal boundaries declared within KVKK Article 5:

  • Performance of a Contract: Providing customized prompt generation outputs, execution of platform features chosen via user input.
  • Legitimate Interests: Improving machine-learning system instructions, validating request parameters, optimization of multi-model fallback routines.
  • Explicit Consent: Voluntarily uploading a profile layout, personal imagery, or participating in the public Prompt Gallery space.

4. Cross-Border Transfers & AI Proxy Connections

To deliver advanced artificial intelligence capabilities, our application orchestrates server-to-server API proxies. Your structured inputs are safely routed to external enterprise large language models:

⚠️ Critical Secure Infrastructure Notice

All payload transfers are carried through secure cryptographic SSL/TLS configurations. We explicitly invoke commercial standard enterprise APIs (Google Gemini API and Groq AI Cloud). Under these commercial developer agreements, your unique prompt ideas, code lines, or base64 photo streams are NOT retained or utilized for training public foundational base models.

5. Your Rights Under KVKK Article 11

As a data subject, you hold the absolute authority to exercise the following privileges by contacting us directly:

  • To learn whether your prompt logs or platform profile parameters are being processed,
  • To request explicit logs concerning the scope of foreign transfers,
  • To demand rectification of incomplete or inaccurate system metadata (e.g., editing profile handles),
  • To object to negative processing results exclusively handled via fully automated decision-making software layers,
  • To request erasure or deletion of your historic database records under valid compliance timelines.

6. Technical Cookie Management Policy

Cookies are small micro-data particles dropped to your browser cache memory to maintain app state transparency. We isolate our cookie architecture into three distinct operational bands:

A. Strict Operational Essentials

Maintains your logged-in profile security session tokens, remembers user preferences, and prevents cross-site request forgery attacks.

B. UI Optimization & Language Tracking

Stores choices such as active linguistic switches (TR/EN) or theme modes, eliminating repetitive preference setups on page loads.

C. Disabling Technical Tracking Cookies

You can seamlessly adjust your data collection settings at any moment by navigating to your native browser configurations (Chrome, Safari, Edge, Firefox) and toggling cookie blocks or managing local storage caches.