Privacy notice (KVKK)
Version 2026-09-07.
This notice explains which personal data Aysel processes, why, where it is kept, with whom it is shared and what your rights are, as required by the Turkish Personal Data Protection Law (KVKK) and, where applicable, the GDPR.
Data controller
Aysel, Türkiye. Contact for privacy matters: hello@aysel.ai. Full legal identity and address will be published here before public launch.
What we process
Sign-in identity (your e-mail address and an opaque account id held by our authentication provider); your study plans, tasks and outcomes; the conversations you have with Aysel, including their content; the long-term notes Aysel keeps about your studies; your purchase and access state (no card data ever reaches us); guest intent entered before you had an account; processing records for AI runs, automations and quotas (never the content itself); and technical diagnostics when the app fails, which carry no message content but do carry an anonymous per-install identifier and a coarse location derived from your network address by the diagnostics provider.
Why we process it
To run the service you signed up for: planning and following your studies, answering your questions with AI assistance, remembering what matters between sessions, securing your account (including two-step verification for our operators), handling purchases, preventing abuse through fair-use limits, and diagnosing errors.
Legal basis
Performance of the service you asked for (KVKK art. 5/2-c), our legitimate interest in keeping the service secure and working (art. 5/2-f), compliance with legal obligations (art. 5/2-ç), and your explicit consent for transfers abroad (art. 9), which you can give or withdraw in your account.
Who processes it on our behalf
Categories of processors, each bound by contract and keeping data under its own retention rules: a database, authentication and e-mail delivery provider (Frankfurt, EU); an application hosting provider (Frankfurt, EU) whose automation queue runs in the United States; an error-diagnostics provider (EU region), which keeps the connecting IP address and the approximate location derived from it for diagnostics for its retention period (currently up to 90 days); a payments provider (once purchases launch); and, once AI features are switched on, AI model providers reached through an AI gateway and a memory provider for long-term notes (both in the United States). The current list of named providers is available on request at the contact address above.
Transfers abroad
Most of your data stays in the European Union. The automation queue, the AI model providers and the memory provider are located in the United States. We ask for your explicit consent before your conversations or notes travel there; without it, AI-assisted features stay off for your account.
How long we keep it
Your account data lives as long as your account does and is erased when you delete it. Clock-driven records are pruned automatically: guest sessions 7 days after expiry (90 days after they were turned into an account), processing and diagnostics records 90 days, fair-use counters 7 days, internal event queues 30 days, payment-provider notifications 90 days. The operator audit trail is retained. Provider-side copies follow each provider's rules.
Your rights
Under KVKK art. 11 you may learn whether we process your data, ask what and why, request correction, deletion or restriction, object to automated decisions and claim damages. Two of these are self-service in your account: download everything we hold about you, or delete your account for good. For anything else write to hello@aysel.ai; we answer within the legal period of 30 days.
Age
Aysel is meant for students. By using it you declare that you are 18 or older, or that a parent or guardian has consented to your use.
Security
Data travels over encrypted connections and rests encrypted at our providers; accounts are referenced by opaque identifiers; operators reach sensitive tools only with two-step verification; no chat content is ever sent to diagnostics.
Cookies
We use only what the service needs: your sign-in session, your language preference and a short-lived guest key while you try Aysel before signing up. There are no advertising trackers.
Changes
We will publish updates to this notice on this page with a new version number.