1
Data Controller
- Company:
- KefStacks Technologies
- Address:
- Cumhuriyet Teknokent – Yenisehir Kardesler St. No: 7/2 B Block, 58070 Merkez/Sivas
- Phone:
- +90 501 656 84 58
- Contact:
- info@kefstacks.com
2
Personal Data We Collect
Registration Information
- Name, surname, email address, password (hashed)
Usage Data
- Characters you create (name, age)
- Stories you produce and their text/images/audio
- Credits used and service logs
Payment Data
- Order information (package, amount, date, conversation id)
- Card information is not received by us — payment data is processed directly by iyzico.
Technical Data
- IP address, browser type, device information
- Cookies (see Cookie Policy for details)
3
Data Processing Purposes
- Account creation and identity verification
- Service delivery (story generation, library storage)
- Processing payments and crediting credits
- Compliance with legal obligations (tax, KVKK)
- Improving service quality (anonymous analytics)
- Communication regarding support requests
4
Legal Basis and Transfer
- Performance of the contract (KVKK art. 5/2-c)
- Legal obligation (KVKK art. 5/2-ç)
- Explicit consent (for marketing notifications)
- International transfer of data: user data may be shared anonymously with AI model providers like OpenAI/Anthropic for story generation.
5
Retention Period
- Stored as long as the account is active.
- When the account is deleted, personal data is anonymized or deleted within 30 days.
- Payment records are kept for 10 years due to legal requirements.
6
Your Rights Under KVKK
Under KVKK art. 11, you have the following rights:
- To learn whether your data is being processed
- To request information about it if it is processed
- To request correction of your data
- To request its deletion when legal conditions arise
- To object to analyses made by automated systems
- To claim damages if you have suffered harm
To exercise your rights, you can apply to info@kefstacks.com. For detailed information, please review the KVKK Notice.
7
Security Measures
- HTTPS encryption is enabled on all traffic.
- Passwords are stored hashed with bcrypt.
- Payment information is processed on PCI-DSS compliant iyzico infrastructure.
- Regular security updates and penetration tests are performed.
8
Children's Privacy
vopido does not knowingly collect personal data from children under 13. When creating a character for your child, only name and age are collected; this information is not used for any purpose other than story generation.
9
Policy Changes
This Privacy Policy may be updated as needed. Major changes are announced via email and site notifications. The current version is always available on this page.