Privacy Policy

1. Who we are

Klakix is operated by Emirhan Güven Yazılım Hizmetleri, a sole proprietorship in Türkiye. We are the controller of the personal data described in this policy, which means we decide how and why it's used. You can reach us about privacy at [email protected].

Operator

Emirhan Güven Yazılım Hizmetleri

Legal form

sole proprietorship, registered in Türkiye

Owner

Emirhan Güven

Location

Küçükçekmece, Istanbul, Türkiye

Tax registration

Küçükçekmece Tax Office, no. 48727294890

Email

[email protected]

This policy applies to klakix.com, the Klakix Studio, and the emails we send. Dodo Payments, and Google if you sign in with it, handle your data under their own privacy policies.

2. What we collect

• Account details: your name, email address, and password (stored only as an irreversible hash). If you sign in with Google, we get your name, email address, and profile picture from Google.
• Your content: the photos and audio you upload, the prompts and scripts you write, and the videos, images, and audio created from them.
• Consent records: when a tool asks you to confirm you have a person's consent, we store your confirmation, its wording, and the time you gave it.
• Purchases and credits: your credit balance and history, the packs and plans you bought, subscription status (plan, billing period, renewal, and cancellation), and payment records we receive from Dodo Payments, such as amounts, dates, billing country, and customer and payment IDs. We never receive your full card number.
• Security and technical data: IP address, login and session records, browser and device information, and logs our servers keep to run the Service safely. When you sign up, we also store an irreversible keyed hash of your IP address and of a random device ID cookie (avy-cihaz), so the free sign-up credits can't be claimed again and again from the same browser or connection.
• Messages: what you send us when you email support or report content.

We don't ask for sensitive information such as government IDs, and we don't collect precise location. When you upload a photo, we strip hidden metadata such as GPS location from it.

3. How we use it, and our legal bases

If you're in the European Economic Area (EEA), the UK, or Switzerland, data protection law requires a legal basis for each use. Here are ours:

Where we rely on legitimate interests, we've weighed them against your rights, and you can object at any time (see section 9). You can turn off reminder emails from the link in any of them or on the email preferences page.

4. Photos of people

A face in a photo you upload is sent to the model you choose, to create the generation you asked for. Before that, the photo and your prompt go through an automated AI safety check that prevents deepfakes and the use of public figures' likenesses. The check only decides whether the content follows our rules: whether a photo shows a public figure (such as a celebrity or politician) or nudity. It doesn't identify private individuals or verify identities, we don't create face templates or other biometric identifiers, and we keep only the result (allowed or blocked) with the upload.

If you upload a photo or recording of someone else, you must have their explicit consent (see our Acceptable Use Policy). If you believe your image or voice was uploaded without your consent, email us and we'll review it and remove content that breaks our rules.

5. AI providers and model training

We don't build our own AI models. When you generate something, your prompt, your uploaded files, and the settings you chose are sent to the AI provider that runs that model (fal.ai, Runware, or ElevenLabs). For some models, that provider passes the request on to the model's developer, such as Google or ByteDance, to run it. The finished output is copied to our own storage, and we tell providers to delete their temporary copies within seven days at the latest.

Your uploads aren't used to train AI models. If a provider changes its terms in a way that affects this, we'll update this policy.

Our providers' safety filters check prompts and files automatically and may reject a request. This doesn't lead to any decision with legal or similarly significant effects on you. The credits are simply returned.

6. Who we share data with

We share personal data only with the service providers below, and only as needed for the purposes in this policy. They process it on our instructions, except where noted.

We may also disclose data when the law requires it, for example to a court or authority, to protect people from harm, or as part of a sale or restructuring of our business, in which case this policy would continue to apply to your data. We don't sell your personal information, and we don't share it for targeted advertising.

7. International transfers

We're based in Türkiye, our servers are in the EU, and some of our providers are in the United States, the United Kingdom, and India. When personal data from the EEA, the UK, or Switzerland goes to a country without an adequacy decision, we rely on safeguards recognized by data protection law, such as the European Commission's Standard Contractual Clauses (with the UK addendum where needed) or the EU-US Data Privacy Framework where a provider is certified. You can ask us for more information about these safeguards.

8. How long we keep data

• Account details: for as long as your account is open. When you delete your account, your account data is deleted.
• Uploads, outputs, and the consent records that go with them: until you delete them or your account.
• Temporary copies at AI providers: set to be deleted within seven days at the latest.
• Payment, invoice, and subscription records: ten years after the transaction, as required by Turkish tax and commercial law. Dodo Payments keeps its own records under its own legal obligations.
• Login and security logs: two years.
• Sign-up IP and device hashes used to protect the free sign-up credits: 12 months from sign-up, then deleted automatically.
• Support emails: for as long as we need them to help you and handle any follow-up.

9. Your rights

Depending on where you live, you have the right to:

• get a copy of your personal data and information about how we use it;
• correct data that's wrong or incomplete;
• have your data deleted;
• restrict how we use it, or object to uses based on legitimate interests;
• receive the data you gave us in a portable format;
• withdraw consent at any time, without affecting what we did before you withdrew it.

You can change your details and delete your account yourself in Settings. For anything else, email [email protected] from the address on your account. We may need to confirm it's you, and we reply within 30 days. There's no charge.

If you're in the EEA, the UK, or Switzerland, you can also complain to your local data protection authority, for example the Information Commissioner's Office in the UK. We'd appreciate the chance to help first.

10. Privacy rights in the United States

If you live in a US state with a consumer privacy law, such as California, you have the right to know what personal information we collect and how we use it, to ask for a copy, to correct it, and to have it deleted. You can use these rights as described in section 9, or through an authorized agent. We won't treat you differently for using them.

The categories of personal information we collect are listed in section 2, and we collect them from you, from your use of the Service, from Dodo Payments and, if you use it, from Google sign-in. We use them for the purposes in section 3 and disclose them only to the providers in section 6. We don't sell personal information, we don't share it for cross-context behavioral advertising, and we don't use sensitive personal information to infer things about you.

11. Children

Klakix is for adults only. You must be 18 or older to create an account, and we don't knowingly collect personal data from children. If you believe a child has created an account, email us and we'll delete it.

12. Cookies

We use only the cookies needed to keep you signed in and to protect the site. We don't use analytics or advertising cookies. The full list is in our Cookie Policy.

13. Security

Passwords are stored as irreversible hashes, connections are encrypted with TLS, uploaded files are kept at addresses that can't be guessed, and access to our systems is limited. No system is perfectly secure, so if we ever learn of a breach that affects your data, we'll tell you and the authorities as the law requires.

14. Changes to this policy

We may update this policy, for example when we add a provider. The current version is always on this page with the date it was last updated. If a change materially affects how we use your data, we'll let you know by email or in the app before it takes effect.

15. Contact

Questions or requests about privacy: [email protected].

This document is written in English, and the English version is the governing version for Klakix. If we ever provide a translation, it is for convenience only.