KVKK — Personal Data Protection Notice
Last updated: 2026
This notice explains how VERIM AI processes your personal data under Turkey's Personal Data Protection Law No. 6698 ("KVKK"), in its capacity as data controller.
1. Data controller
VERIM AI ("we"), acting as the data controller ("veri sorumlusu") under the KVKK, determines the purposes and means of processing your personal data.
2. Personal data we process
Identity and contact data (name, email), account and organization details, content you submit (messages, uploads, datasets), usage and billing metadata, and access tokens for third-party services you choose to connect.
3. Purposes of processing
To provide and operate the service, run your agents, meter usage and billing, secure the platform, and support you. We do not sell your personal data.
4. Legal grounds (KVKK Art. 5-6)
Processing relies on the establishment and performance of a contract, compliance with legal obligations, our legitimate interests, and — where required — your explicit consent.
5. Transfers (KVKK Art. 8-9)
Data is shared only with infrastructure and model providers strictly necessary to deliver the service (hosting, LLM providers) and with the third-party services you connect. It may be disclosed to authorized authorities where legally required, including transfers abroad in line with the KVKK.
6. Method of collection
Personal data is collected by electronic means through your use of the platform and website.
7. Retention period
Data is retained for as long as the processing purpose requires and applicable legislation prescribes; at the end of that period it is deleted, destroyed, or anonymized.
8. Your rights (KVKK Art. 11)
You have the right to learn whether your data is processed, request information about it, ask for correction or erasure, object to processing, and request remedy of any harm arising from unlawful processing.
9. Exercising your rights
To exercise your rights, contact us through our Contact page. In accordance with KVKK Art. 13, we respond to requests within thirty (30) days at the latest.