Privacy Policy
Last updated: 2026-09-19
This policy explains how personal data is processed within Renderhane, operated by data controller Turgut Ürer. Please also read the KVKK Data Protection Notice for the detailed statutory disclosure.
1. Categories of Data
Depending on how you use the service, we may process:
• Identity and contact data: name, surname, email
• Account and authentication data: user ID, Google OAuth details, profile photo
• Transaction and content data: uploads, prompts, generated outputs, job and credit history
• Payment data: order, package, and payment status; payment-card data is processed by the payment provider and is not stored by Renderhane
• Technical and security data: IP address, device/browser, access and error logs
• Support data: messages and records relating to your request
2. Purposes and Legal Bases
Data is processed to create and manage accounts, provide the service, administer credits and payments, maintain security, prevent misuse, provide support, and comply with legal duties. Depending on the activity, processing relies on the legal bases in KVKK Art. 5/2, including performance of a contract, legal obligation, establishment or protection of a right, and legitimate interests that do not prejudice fundamental rights. Analytics, advertising, and marketing rely on separate consent where required; the core service is not conditional on optional consent.
3. Retention and Security
Data is retained only for as long as the purpose and applicable law require, then deleted, destroyed, or anonymised. An account-closure request does not override mandatory retention duties or records needed for ongoing disputes. Reasonable technical and organisational measures such as access controls, transport security, monitoring, and backups are used against unauthorised access, loss, and misuse. No internet system can promise absolute security.
4. Service Providers and Transfers
When the relevant feature is used, data may be shared on a need-to-know basis with:
• Supabase — database and authentication
• Cloudflare — content delivery and file storage
• fal.ai — AI model processing
• Google — OAuth and, with consent, Analytics and AdSense
• Panola — analytics with consent
• iyzico — payment processing
• Resend — transactional email
Where data is transferred abroad, an applicable transfer condition and safeguard under KVKK Art. 9 is required.
5. Retention Criteria and Your Controls
Account and transaction records may be kept while the account relationship continues; uploads and outputs until you delete them, close the account, or they are no longer needed. Payment and accounting records are retained for periods required by tax and commercial law; security logs for a proportionate operational period. You can change cookie choices through “Cookie Preferences” in the footer.
6. Rights and Contact
To exercise your rights under KVKK Art. 11 or ask a privacy question, write from your registered email address to turgut.urer@gmail.com. Data controller: Turgut Ürer. Address: Denizköşkler Mahallesi, Hasan Çelebi Sokak No: 19, Avcılar/Istanbul, Türkiye. The KVKK Data Protection Notice explains the application procedure.