Privacy Policy

This Privacy Policy explains how your personal data collected through the artolume.com website operated by Artolume Yapay Zeka Teknolojileri Anonim Şirketi ("Artolume", "we", "our") is processed.

1. Data Collected

We may collect the following personal data when you use our service:

• First name, last name and e-mail address (during registration)
• Phone number and billing address (during purchase)
• IP address, browser information and usage logs
• The image and video content you create
• Payment transaction reference numbers (card details are not stored)
• If you use "Sign in with Apple" in the iOS app: the user identifier provided by Apple, your email address (which may be Apple's private relay address) and, if you choose to share it at first sign-in, your name
• Purchases in the iOS app: App Store transaction number, subscription plan, purchase and renewal dates, and the identifier that links the purchase to your account (your payment details stay with Apple and are not sent to us)
• Purchases in the Android app: Google Play order number, subscription plan, purchase and renewal dates, and the identifier that links the purchase to your account (your payment details stay with Google).
• If you allow notifications: your device's notification identifier (push token) and device language

2. Purposes of Using the Data

• Account creation and authentication
• Purchase and invoicing transactions
• Verifying subscriptions and purchases in the iOS app and applying renewals and refunds to your account
• Sending a notification when your creation is ready
• Responding to support requests
• Improving service quality and debugging
• Fulfilling legal obligations

3. Sharing of Data

Your personal data is not sold or rented to third parties. It may be shared only in the following cases:

• With the payment infrastructure provider iyzico (mandatory for payment security)
• With Apple (Sign in with Apple, verification of in-app purchases and subscriptions)
• With Google (verifying purchases and subscriptions in the Android app through Google Play)
• With Expo (650 Industries, Inc., USA) (delivering app notifications to your device; only the notification identifier and notification text)
• With competent authorities where there is a legal obligation or a court order
• With the infrastructure providers we work with to run the service (under a data processing agreement)

Some of these providers (hosting, AI models, e-mail) have servers abroad. Which data is transferred to which provider and to which country is set out in the KVKK Privacy Notice.

Showcase (Discover): Under the Membership Agreement, the images and videos you generate may be shown publicly, together with their prompts and the name of the model used, on the Discover page, in model page examples and in home page examples; your name, e-mail address and account details are not shown. If you mark a generation as "Private", it is not shown in the showcase, and if it is already there it is removed immediately; with the "Make my new generations private" setting on your profile, your subsequent generations start as private. We recommend that you do not write personal data in your prompts.

ChatGPT connection: If you connect your Artolume account to the Artolume app in ChatGPT with your own consent, only the information needed for the tasks you request in that app is sent to ChatGPT (OpenAI): your account number, name and e-mail address to recognise your account; your credit balance; and the status of the generations you start through this connection and your recent generations, the credits spent and time-limited (valid for 7 days) links to the result files. The descriptions you write and the images you attach in ChatGPT are sent to Artolume for generation, processed in the same way as your generations on the website and saved to your gallery. Your password is not shared with ChatGPT; the connection works with time-limited access keys, and you can remove the connection from the ChatGPT settings at any time. How ChatGPT processes this information is subject to OpenAI's privacy policy.

4. Cookies

Strictly necessary cookies are used for session management. No third-party advertising or tracking cookies are used.

5. Data Security

All communication is protected by SSL/TLS encryption. Passwords are stored with a one-way hash. Payment information is held in iyzico's PCI DSS-compliant infrastructure.

6. Retention Period

Your personal data is retained for as long as the account is active and within the scope of legal retention obligations (5 years for tax records). If you delete your account, your data is anonymised and archived.

7. Your Rights (KVKK)

Under Law No. 6698 on the Protection of Personal Data, you have the following rights:

• To learn whether your personal data is processed
• To request information about your processed data
• To request the correction of inaccurate data
• To request the erasure of your data when the conditions are met
• To request restriction of processing or to object

You can exercise these rights via the contact form or at destek@artolume.com.

8. Contact

For questions about this policy:
Artolume Yapay Zeka Teknolojileri Anonim Şirketi
Adatepe Mahallesi Doğuş Caddesi No: 207 AG İç Kapı No: 1, Buca / İzmir
destek@artolume.com — 0 232 700 28 88