KVKK Disclosure Notice

1. Data controller

Data controller: Maivo Yazılım Ticaret Ltd.Şti.

Contact: info@cartelier.ai

2. Categories of personal data processed

• Identity: first name, last name; for web purchases, Turkish ID or tax ID number and tax office.
• Contact: email address; for web purchases, billing address and mobile phone.
• Customer transaction: uploaded vehicle images/videos, listing details, transaction and credit records, subscription and purchase records.
• Transaction security: IP address, log records, session and device information.

3. Purposes of processing

• Providing the Service and performing the contract (photo processing, listing generation).
• Account creation, authentication and account management.
• Managing the credit balance and transactions.
• Ensuring information security and preventing abuse.
• Fulfilling legal obligations and following up on legal claims.

4. Legal grounds for processing (KVKK art. 5)

• Being directly related to the establishment or performance of a contract.
• The data controller's compliance with a legal obligation.
• Legitimate interest, provided it does not harm the fundamental rights and freedoms of the data subject.
• Your explicit consent where necessary.

5. Transfer of personal data

Your personal data is transferred to the following service providers for the purpose of providing the Service. Their servers are located abroad; the transfer is made under KVKK art. 9 to the extent necessary for the performance of the Service:

Hosting and storage: your account data, backups and uploaded images are stored on Amazon Web Services servers in the European Union (Sweden/Stockholm) region.

Image processing: the vehicle images you upload are transferred to AI service providers for processing (background removal, scene and video generation).

Payments and subscriptions: iyzico for web payments; Apple and Google for mobile purchases, and RevenueCat, Inc. (USA) for managing subscription records.

Accounting: your billing details and purchase records are shared with our accountant (in Turkey) to issue invoices for your web purchases.

Measurement, crash reporting and email: Google (Analytics 4 / Firebase Analytics / Firebase Crashlytics) for usage measurement and crash reports, Resend for transactional emails.

6. Collection method

Your personal data is collected electronically through the web and mobile application, via automated and partially automated methods, during your account creation and use of the Service.

7. Your rights (KVKK art. 11)

By applying to the data controller, you can exercise the following rights:

• Learn whether your personal data is processed and request information about it.
• Learn the purpose of processing and whether the data is used in line with that purpose.
• Know the third parties to whom the data is transferred domestically or abroad.
• Request correction if the data has been processed incompletely or inaccurately.
• Request deletion/destruction within the conditions of KVKK.
• Object to a result to your detriment arising from analysis solely by automated systems.
• Request compensation for damages arising from unlawful processing.

8. Application

To exercise your rights, you can send your requests in writing to info@cartelier.ai. Your application will be concluded within 30 days at the latest.