ECOM STUDIO - AI-Powered Visual and Video Content Creator

1. Data Controller

Ecom Studio Prodüksiyon, Reklam ve Danışmanlık A.Ş. ("we," "us," or "Ecom Studio") is the data controller responsible for your personal data.

Company Name: Ecom Studio Prodüksiyon, Reklam ve Danışmanlık A.Ş.

Address: Nisbetiye Mah. Gazi Güçnar Sk. Uygur İş Merkezi No: 4 İç Kapı No: 2 Beşiktaş / Istanbul, Turkey

Email: hello@ecomstudio.com.tr

KVKK Data Controller: CEO

2. What Personal Data We Collect

We collect the following personal data to provide and improve our AI-powered video and image generation services:

2.1 Account Information

Full Name: To identify you and personalize your experience
Email Address: For account verification, communication, and service notifications
Phone Number: Optional, for account security and support
Company Name: Optional, for corporate users
Password: Encrypted and stored securely

2.2 Billing Information

Billing Address: Name, address, postal code, city, country
Turkish ID Number: For individual invoices (if applicable)
Tax Office and Tax Number: For corporate invoices (if applicable)
Payment Information: Processed securely through certified payment gateway (we do not store credit card details)

2.3 Usage Data

Account Balance: To track your service usage
Transaction History: Records of balance purchases and usage
Generated Content: Videos and images you create using our AI services
Uploaded Content: Images and assets you upload for processing

2.4 Analytics Data

Usage patterns and behavior: To improve our services
Device information: Browser type, operating system
Cookies: Third-party analytics services may use cookies to collect anonymous usage statistics

Note: We do not use cookies for tracking on our website. However, third-party analytics services may set cookies on your device for analytics purposes. You can opt-out by using browser extensions or disabling cookies in your browser settings.

3. Legal Basis for Data Processing

We process your personal data based on the following legal grounds under KVKK and GDPR:

Explicit Consent: When you create an account, you provide explicit consent through a checkbox agreement to process your personal data in accordance with this Privacy Policy
Contract Performance: Processing is necessary to fulfill our service agreement with you
Legal Obligation: To comply with Turkish tax laws, invoicing requirements, and KVKK regulations
Legitimate Interests: For fraud prevention, security, and service improvement

4. How We Use Your Personal Data

We process your personal data for the following purposes:

Service Delivery: To provide AI-powered video and image generation services
Account Management: To create, maintain, and secure your account
Payment Processing: To process balance purchases through secure payment gateway
Invoicing: To generate invoices using certified accounting systems
Communication: To send service updates, notifications, and support responses
Service Improvement: To analyze usage patterns and improve our platform
Legal Compliance: To comply with Turkish law and KVKK requirements
Fraud Prevention: To detect and prevent fraudulent activities

5. Third-Party Services and Data Sharing

We use the following third-party service providers to operate our platform. Your data is shared with these services only for the purpose of providing our services to you. We do not sell your personal data to any third parties.

5.1 Infrastructure and Storage

Database and Authentication Services: Secure database and user authentication (data stored in EU/US servers)
Content Delivery Network (CDN): Content delivery and file storage (global CDN infrastructure)
Cloud Hosting Services: Website hosting and application infrastructure (global cloud infrastructure)

5.2 AI Processing Services

Your uploaded images and videos are processed by third-party AI service providers that specialize in:

AI Video Generation: Advanced video generation from images
AI Image Processing: Image enhancement and manipulation
AI Video Editing: Automated video editing and effects
AI Content Generation: Creative content creation and animation

Important: We do NOT use your content to train AI models. Your content is only processed to deliver the service you requested and is subject to the respective AI service provider's privacy policies.

5.3 Payment and Financial

Payment Gateway Services: Secure payment processing (PCI-DSS compliant)
Invoicing and Accounting Systems: Electronic invoicing and financial record management

5.4 Analytics

Web Analytics Services: Anonymous usage statistics and service improvement

Note: All third-party service providers are carefully selected data processors who comply with data protection standards. These services are necessary for the operation of our platform and we share data with them only to the extent required to provide our services.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside of Turkey, including the European Union and the United States, where our service providers (cloud hosting, database, CDN, analytics, and AI processing services) operate their servers and infrastructure.

Data Transfer Safeguards:

We ensure all international data transfers comply with KVKK Article 9 and GDPR Chapter V requirements
Our service providers implement appropriate technical and organizational security measures
Data transfers to the EU are covered by adequacy decisions or Standard Contractual Clauses (SCCs)
For transfers to other countries, we rely on appropriate safeguards including contractual protections and compliance certifications
All service providers are contractually obligated to protect your data in accordance with applicable data protection laws

Important: These data transfers are necessary to provide our services. Without international data transfers, we would not be able to operate our platform or provide AI-powered video generation services.

7. Data Storage and Retention

Account Data: Stored as long as your account is active
Generated Content: Stored until you delete your account or request deletion
Transaction Records: Kept for 10 years for tax and legal compliance as required by Turkish law
Deleted Accounts: All personal data and content deleted within 30 days of account deletion request
Backup Systems: Deleted data may remain in backup systems for up to 90 days before permanent deletion

8. Your Rights Under KVKK and GDPR

You have the following rights regarding your personal data:

Right to Access: Request information about what personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your account and all associated data (right to be forgotten)
Right to Data Portability: Request your data in a machine-readable format
Right to Object: Object to certain types of data processing
Right to Restriction: Request limitation of data processing
Right to Withdraw Consent: Withdraw your consent at any time by deleting your account
Right to Lodge a Complaint: File a complaint with the Turkish Personal Data Protection Authority (KVKK)

To exercise these rights, please contact us at hello@ecomstudio.com.tr. We will respond to your request within 30 days as required by KVKK.

9. Data Security

We implement industry-standard security measures to protect your personal data:

Encrypted data transmission (SSL/TLS)
Encrypted password storage using secure hashing algorithms
Secure authentication system with industry-standard protocols
Regular security audits and vulnerability assessments
Access controls and activity monitoring
Secure payment processing (PCI-DSS compliant payment gateway)
Data backup and disaster recovery procedures
Employee training on data protection and security

Note: While we take all reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your personal data to the best of our ability.

10. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

Notify the Turkish Personal Data Protection Authority (KVKK) within 72 hours of becoming aware of the breach, as required by law
Notify affected users via email to the registered email address on file within a reasonable timeframe
Provide clear information about the nature of the breach, potential consequences, and measures taken to address it
Recommend appropriate steps users should take to protect themselves (e.g., password changes, monitoring account activity)
Document the incident and implement measures to prevent future breaches

If you suspect any unauthorized access to your account or potential security issues, please contact us immediately at hello@ecomstudio.com.tr

11. Age Restriction

Our services are intended for users aged 18 years or older. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from someone under 18, we will delete it immediately and terminate the account.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@ecomstudio.com.tr

12. Automated Decision Making

We do not use automated decision-making or profiling that would produce legal effects or similarly significantly affect you. All decisions regarding account suspension, content moderation, or service access are made with human review and oversight.

Our AI services are used solely for content generation based on your explicit requests and do not make decisions about you as a person.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by:

Posting the new policy on this page with an updated "Last Updated" date
Sending an email notification to your registered email address for significant changes
Displaying a prominent notice on our platform

Your continued use of our services after such changes constitutes acceptance of the updated policy. If you do not agree with the changes, you may delete your account.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or need assistance, please contact us: