Privacy Policy
Last updated: August 8, 2026
1. Who We Are
This Privacy Policy explains how Grafix, operated by Tuncer Alçı, a sole proprietorship registered in Türkiye (tax ID 0500170524, Şişli, İstanbul), collects, uses, and protects your personal data when you use our Service.
2. Information We Collect
We collect the information you provide directly, such as your email address and password when you create an account, the website URLs and brand details you submit for analysis, and any messages you send through our support form. We also store the content generated on your behalf, including images and the prompts used to create them. Payment details are collected and processed directly by Stripe; we never see or store your full card number.
3. How We Use Your Information
We use your information to provide and maintain the Service, process your subscription and payments, analyze the brands you submit and generate content based on them, respond to support requests, and communicate important account or service updates.
4. Third-Party Processors
We share data with the service providers that power Grafix: Supabase (database, authentication, and file storage), Stripe (payment processing), and OpenAI (AI-powered brand analysis and content generation). These providers process data on our behalf and are bound by their own privacy and security commitments.
5. Cookies
We use essential cookies to keep you signed in and to remember your session. We do not use third-party advertising or tracking cookies.
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account or request deletion through our contact form, we will delete or anonymize your personal data within a reasonable time, except where we are required to retain records for legal or accounting purposes.
7. Your Rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Türkiye-based users have these rights under Law No. 6698 on the Protection of Personal Data (KVKK). To exercise any of these rights, contact us through our contact form.
8. Data Security
We use industry-standard technical and organizational measures to protect your data, including encrypted connections and access controls provided by our infrastructure partners. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. International Data Transfers
Our service providers may process and store data outside of Türkiye, including in the European Union and the United States. Where this happens, we rely on the safeguards and compliance commitments provided by those providers.
10. Children's Privacy
The Service is not directed at individuals under the age of 18, and we do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please reach out through our contact form on the Help page.