Privacy Policy - Jetkite

Effective Date: October 21, 2025

1. Introduction

Welcome to Jetkite. This Privacy Policy explains how JETKITE YAZILIM SANAYI VE TICARET A.S. ("Jetkite", "we", "us", or "our") collects, uses, shares, and protects information about you when you use our web applications, websites, and related services (collectively, the "Service").

We are committed to protecting your privacy. By accessing or using our Service, you agree to the collection and use of information in accordance with this policy. This Privacy Policy should be read in conjunction with our Terms of Use.

2. Information We Collect

We collect information in a few different ways to provide and improve our Service to you.

2.1. Information You Provide Directly

Account Information: When you register for an account, we collect information such as your name, email address, and password (which is hashed).
User Content: We collect the information and content you create, upload, or post to the Service. This includes but is not limited to your preferences, settings, favorites, and any text or prompts you enter into our features, including the Artificial Intelligence (AI) Features.
Communications: If you contact us directly for support or other inquiries, we may receive additional information about you, such as your name, email address, the contents of your message, and any attachments you may send us.

2.2. Information We Collect Automatically

Usage Data: We automatically collect information about your interactions with our Service. This may include your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and other diagnostic data needed for security and analytics.
Cookies and Tracking Technologies: We use cookies and similar tracking technologies (such as web beacons and pixels) to recognize your browser or device, store preferences, analyze traffic, and measure the effectiveness of our content and ads.

Cookies we use include:

– Strictly Necessary Cookies: Essential for the operation of the Service.
– Performance Cookies: Help us understand how users interact with the Service.
– Functionality Cookies: Remember your preferences and improve usability.
– Targeting or Advertising Cookies: Track your activity across sites to deliver relevant ads.

We may also allow certain third parties (such as Google Analytics or Facebook SDK) to place cookies on your device to collect data on your use of our Service.

You can manage your cookie preferences via your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling certain cookies may impact your experience with the Service.

For users in the European Union or other regions with similar data protection laws, we display a cookie consent banner on your first visit to obtain your permission before placing non-essential cookies.

2.3. Information From Third Parties

Third-Party Authentication: If you choose to register or log in to our Service using a third-party service (like Google, Apple, or Facebook), we will receive personal information from that service, such as your name and email address, as permitted by your privacy settings on that service.
Payment Information: Our payment processor, Paddle, handles all transactions. We do not collect or store your full credit card information. However, we may receive transaction-related information from Paddle, such as your subscription status, purchase history, and country of residence, to provide you with the Service and support.

2.4. Information We Do Not Collect

We do not collect biometric data, government-issued identification numbers, health-related data, or any other sensitive personal data unless explicitly required for a lawful purpose and with your prior written consent. We advise users not to submit any such information through our Service unless specifically instructed.

3. How We Use Your Information

We use the information we collect for various purposes, including to:

Provide, Operate, and Maintain our Service: To create your account, enable you to use our features, and ensure the Service is functioning correctly.
Process Transactions: To manage your subscriptions, process payments through our payment processor, and handle billing issues.
Improve and Personalize the Service: To understand how you use the Service, analyze trends, develop new features, and tailor your experience.
Communicate with You: To send you service-related announcements, updates, security alerts, and to respond to your support requests and inquiries.
Ensure Security and Prevent Fraud: To monitor for and prevent fraudulent or unauthorized activity and to protect the security of our Service.
Comply with Legal Obligations: To comply with applicable laws, legal processes, or government requests.

3.1. Legal Basis for Processing

We process your personal data under one or more of the following legal bases, as permitted by the Law on the Protection of Personal Data No. 6698 (KVKK) and applicable Turkish regulations:

Performance of a Contract: To deliver the services you have requested, such as creating and maintaining your account and subscription.
Legitimate Interests: To operate, improve, and secure our Service, provided such interests are not overridden by your rights and freedoms.
Legal Obligation: To comply with our legal duties, including accounting and tax requirements.
Consent: For specific purposes where we explicitly ask for your consent, such as for non-essential cookies or certain marketing communications.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

With Service Providers: We share information with third-party vendors and service providers that help us operate our Service. These include:
- Backend and Hosting: Google Firebase for data storage and authentication.
- Payment Processing: Paddle.com for handling all payments and subscriptions.
- AI Features: Google (for the Gemini API) and potentially other AI providers to power our generative features.
- Analytics: Google Analytics, Facebook SDK, and Microsoft Clarity to help us understand usage patterns.
For Legal Reasons: We may disclose your information if we believe it's required by law, subpoena, or other legal process, or to protect the rights, property, or safety of Jetkite, our users, or the public.
In Case of a Business Transfer: If Jetkite is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.
With Your Consent: We may share your information for other purposes with your explicit consent.

We may also share limited information with consultants, developers, or contractors who perform services on our behalf under strict confidentiality and data protection obligations. These parties are granted access to personal information only to the extent necessary to perform their duties and are contractually bound to safeguard it and use it solely for the purposes specified by Jetkite.

5. Data Storage, Security, and Retention

We are committed to protecting your data. We rely on the robust security infrastructure of our third-party providers, like Google Firebase, which employ industry-standard security measures. We also implement our own technical and administrative security measures to safeguard the data we control.

5.1. Our Security Measures

Encryption: We use TLS/SSL to encrypt all data in transit between you and our Service. Sensitive data is also encrypted at rest on our backend infrastructure.
Access Controls: System access is limited to authorized personnel on a strict least-privilege basis. We use secure authentication methods to protect against unauthorized access.
Secure Infrastructure: Our services are hosted on secure, certified cloud infrastructure provided by our partners like Google.
Regular Audits: We conduct periodic security reviews, vulnerability assessments, and code reviews to maintain the integrity of our Service.

However, no electronic transmission or storage method is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

5.2. Data Retention Period

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, or as required to comply with our legal obligations.

If your account remains inactive for more than twenty-four (24) months, we may anonymize or permanently delete your personal data, unless we are required by law to retain it for a longer period (for example, for accounting, tax, or legal compliance purposes). Prior to deletion, we may attempt to notify you using the contact details associated with your account.

6. Your Data Rights and Choices (KVKK)

Under Turkish Law No. 6698 on the Protection of Personal Data (KVKK), you have the following rights regarding your personal data:

Right to Learn Whether Data Is Processed: You have the right to ask whether your personal data is being processed by us.
Right to Request Information: If your data has been processed, you may request information about such processing.
Right to Access: You may request access to your personal data and obtain a copy.
Right to Rectification: You may request the correction of your inaccurate or incomplete personal data.
Right to Erasure: You may request deletion of your personal data if the legal grounds for processing no longer exist.
Right to Object to Certain Processing: You may object to the processing of your data, especially for marketing or profiling purposes.
Right to Data Portability: Where technically possible, you may request to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Lodge a Complaint: You may file a complaint with the Personal Data Protection Authority of Türkiye (KVKK) if you believe your rights have been violated.

To exercise any of these rights, you may contact us via email at support@jetkite.com. Your requests will be reviewed and responded to within the timeframes required by law.

7. Push Notifications

We may occasionally send you push notifications through our Service with updates, alerts, and other communications related to the Service. You can opt-out of receiving these notifications at any time by changing the settings on your device or in your web browser.

8. Notice to European Union Residents (GDPR)

If you are a resident of the European Economic Area (EEA), the UK, or Switzerland, you have certain data protection rights under the General Data Protection Regulation (GDPR). Jetkite is committed to ensuring these rights. The rights listed under Section 6 are largely consistent with your rights under GDPR. Additionally, you have the right to lodge a complaint with your local data protection supervisory authority.

9. Notice to California Residents (CCPA)

If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA). These rights include the right to know what personal information we collect and the right to request its deletion. You can exercise these rights by contacting us at the email provided in this policy. Jetkite does not "sell" your personal information as that term is defined under the CCPA.

10. International Data Transfers

Jetkite is based in Türkiye. Your personal information may be stored or processed in countries where we or our service providers maintain facilities, including the United States and the European Union.

Please note:

Data may be transferred to service providers such as Google, Paddle, and others located outside of Türkiye.
These transfers are performed in compliance with applicable data protection laws, including the Turkish Law on the Protection of Personal Data (KVKK).
We take necessary technical and contractual measures to ensure that your data receives an adequate level of protection when transferred internationally.
By using the Service, you consent to the transfer of your data to countries outside of Türkiye, where the data protection standards may differ.

11. Privacy Considerations for AI Features

Our Service integrates generative AI technologies provided by third-party platforms, such as Google’s Gemini API, to deliver features like chat, image generation, and content suggestions.

Please note the following:

Data Submitted to AI Providers: Any prompt, input, or content you submit to use the AI Features may be transmitted to and processed by the respective third-party AI provider (e.g., Google). These providers may temporarily store inputs for safety, abuse prevention, or model improvement purposes as described in their privacy policies.
Do Not Submit Sensitive Information: You should not enter personal, confidential, financial, or sensitive data when using AI Features. These inputs may leave our systems and be processed under the control of the AI provider.
Limited Control Over External Providers: While we implement measures to secure user input before transmission, Jetkite does not control how third-party AI platforms use, retain, or interpret your data once submitted. Use of AI Features is therefore at your own discretion.
Third-Party Policies Apply: Your interactions with the AI components are also governed by the respective provider’s terms. For example, usage of Gemini is subject to Google’s Gemini Apps Privacy Hub.

By using our AI Features, you acknowledge and agree to the above terms and the separate privacy policies of our AI partners.

12. Children's Privacy

Our Service is not intended for children under the age of 18, and we do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use the Service or submit any personal information to us.

If you are a parent or legal guardian and you believe that your child has provided us with personal information without your consent, please contact us immediately at support@jetkite.com. Upon receiving such notice, we will promptly take steps to delete the information and terminate the child’s account if necessary.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically for any changes.

14. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of Türkiye, without regard to its conflict of law principles.

Any disputes arising out of or in connection with this Privacy Policy, including any questions regarding its existence, validity, or termination, shall be subject to the exclusive jurisdiction of the courts of Ankara, Türkiye.

15. Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy or our data practices, you may contact us at:

Data Controller:
JETKITE YAZILIM SANAYI VE TICARET A.S.
Address: Konutkent Mh. 3028 Cd. No:6/55 Çankaya, 06810, Ankara, Türkiye
Support Email: support@jetkite.com
Ankara Chamber of Commerce Registration No: 463351
VAT No: 4842239716

If you believe that your personal data has been processed in violation of applicable laws, you have the right to file a complaint with the Turkish Personal Data Protection Authority (KVKK Kurumu) at https://www.kvkk.gov.tr.