REEDO PRIVACY POLICY & DISCLOSURE TEXT

1. INTRODUCTION

At Reedo, we value user privacy.

This text explains how personal data is processed, stored, shared with third parties, and outlines user rights in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).

2. DATA CONTROLLER

The data controller within the scope of this disclosure text:

• Company: Reedo Software and Technology
• Address: Fatih Sultan Mah. 2720. Sk., HL Office 4/A No:5 Etimesgut / Ankara / Turkey
• Email: legal@reedo.net
• Web: www.reedo.net

3. PROCESSING OF PERSONAL DATA

Types of data processed:

• Identity Information: First name, last name, username
• Contact Information: Email address
• Technical Information: IP address, device and browser information, session data
• Transaction Data: Uploaded images, generated AI outputs, usage history
• Payment Information: Payment amount and transaction details (card information is stored by iyzico only, not by Reedo)
• Referral Data: Referral code, number of invited users, credits earned through referrals

Purposes of data processing:

• Providing the service and managing user accounts
• Delivering AI-based image generation and processing services
• Processing payment transactions
• Improving user experience
• Operating the referral (invite) program
• Fulfilling legal obligations
• Ensuring platform security

4. DATA TRANSFER AND THIRD-PARTY SERVICES

Personal data may be shared with the following third-party service providers for the purpose of delivering the service:

• Clerk (clerk.com): Used for user authentication and session management. Name, surname, email address, and session data are processed on Clerk servers.
• Google Cloud / Vertex AI: Used for AI-based image generation and processing. Uploaded images and text prompts are transmitted to Google servers.
• Google Maps & Places API: Used for map display, location search, and satellite image processing.
• Cloudflare: Used for CDN (content delivery network), DNS management, and DDoS protection. Web traffic is routed through Cloudflare.
• Cloudflare R2: Used for storing user images and AI outputs.
• Turso (LibSQL): Database service where user account information and application data are stored.
• Vercel: Used for web application hosting.
• iyzico: Used as payment infrastructure. Credit card information is processed and stored by iyzico in a PCI-DSS compliant manner; Reedo does not have access to this information.

International data transfers are carried out in accordance with KVKK and GDPR international data protection principles, with adequate security measures in place.

5. ARTIFICIAL INTELLIGENCE AND IMAGE DATA USAGE

• Images uploaded through the platform are used solely for the AI operation requested by the user (rendering, editing, video generation, etc.).
• Uploaded images and AI outputs are not used for model training purposes.
• Intellectual property rights of AI-generated images are determined within the framework of the platform's terms of service.
• Processed images are stored in the user's account and can be deleted by the user. When the account is deleted, associated images are also deleted.

6. USE OF COOKIES

The following cookies are used on the reedo.net website:

Reedo does not use third-party advertising or analytics tracking cookies. All cookies are essential or functional in nature, required for the operation of the service. Users can manage cookie preferences through browser settings; however, disabling essential cookies may prevent the use of the service.

7. REFERRAL (INVITE) PROGRAM

• Users can invite friends to the platform through a unique referral code.
• When an invited user registers, the inviting user receives credit rewards.
• The inviting user can only see the name (or masked email address) and join date of the people they invited. Access to detailed personal information is not provided.
• Referral data (referral code, invite count) is stored in the user's account.

8. DATA STORAGE AND SECURITY

• Personal data is stored only during the service period or until the legal retention period expires.
• Uploaded images are stored on secure servers until deleted by the user or when the account is closed.
• All data communication is protected with SSL/TLS encryption.
• Database access is restricted through authorization mechanisms.
• Account deletion permanently removes all personal data and associated content.

9. DATA SUBJECT RIGHTS

Under KVKK Article 11 and GDPR, users have the following rights:

• Learning whether their personal data has been processed
• Requesting information about data processing if data has been processed
• Learning the purpose of processing and whether data is used in accordance with its purpose
• Knowing the third parties to whom data is transferred domestically or abroad
• Requesting correction of incomplete or inaccurately processed data
• Requesting deletion or destruction of personal data
• Requesting transfer of data to another data controller (data portability)
• Objecting to any result arising against them through analysis of processed data exclusively by automated systems
• Claiming compensation for damages arising from unlawful processing of personal data

Requests can be sent to legal@reedo.net. Applications will be resolved free of charge within 30 days at the latest.

10. LEGAL BASIS FOR DATA PROCESSING

• Performance of contract: Data processing necessary for providing the service
• Legitimate interest: Ensuring platform security, service improvement
• Legal obligation: Tax and accounting records
• Explicit consent: Marketing communications (if applicable)

11. POLICY CHANGES

• This policy may be updated from time to time.
• Significant changes will be communicated to users via email or in-platform notification.
• The current version is always published at www.reedo.net/privacy.

12. CONTACT

For all privacy-related questions and requests:

• Email: legal@reedo.net
• Address: Fatih Sultan Mah. 2720. Sk., HL Office 4/A No:5 Etimesgut / Ankara / Turkey