Personal Data Protection Notice (KVKK)
Last updated: February 2026
This disclosure notice has been prepared in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform users of the Astravera platform about the processing of their personal data.
1. Data Controller
Your personal data is processed by the Astravera platform ("Astravera") in its capacity as data controller.
Contact: support@astravera.io
2. Categories of Personal Data Processed
The following categories of personal data may be processed through our platform: Identity data (date of birth day/month/year); Preference data (language preference); Transaction security data (IP address, device type, timestamps); Usage data (app and website usage statistics); Content data (information provided during AI interactions on the platform).
As our services evolve, the categories of processed data may be updated. In such cases, this disclosure notice will be revised accordingly.
3. Purposes of Data Processing
Your personal data is processed for the following purposes:
- Providing and operating platform services
- Generating AI-powered personalized content
- Improving user experience and ensuring platform performance
- Maintaining technical infrastructure security
- Fulfilling legal obligations
4. Legal Bases for Data Processing
Your personal data is processed based on the following legal grounds under Article 5 of the KVKK:
- Processing is necessary for the performance of a contract to which the data subject is a party (Article 5/2-c)
- Processing is necessary for compliance with a legal obligation to which the data controller is subject (Article 5/2-d)
- Processing is necessary for the legitimate interests pursued by the data controller, provided that this does not harm the fundamental rights and freedoms of the data subject (Article 5/2-f)
- In specific cases, the explicit consent of the data subject (Article 5/1)
5. Transfer of Personal Data
Your personal data may be transferred to the following parties in accordance with Articles 8 and 9 of the KVKK, for the purposes stated above: server hosting and cloud infrastructure service providers; AI processing infrastructure providers; analytics and performance monitoring service providers; authorized public institutions and organizations where legally required.
Some of our service providers operate outside of Turkey. Cross-border data transfers are carried out in compliance with the conditions set forth in Article 9 of the KVKK.
6. Data Retention
Your personal data is retained for as long as necessary to fulfill the purposes for which it was processed, and within the statute of limitations prescribed by applicable legislation.
Once the processing purpose ceases to exist, your data is deleted, destroyed, or anonymized in accordance with the KVKK and relevant regulations.
7. Your Rights as a Data Subject
Under Article 11 of the KVKK, you have the following rights:
- Learning whether your personal data has been processed
- Requesting information about the processing if your data has been processed
- Learning the purpose of data processing and whether your data has been used in accordance with its purpose
- Knowing the third parties to whom your personal data has been transferred, domestically or abroad
- Requesting correction of your personal data if it has been processed incompletely or inaccurately
- Requesting deletion or destruction of your personal data under the conditions set forth in Article 7 of the KVKK
- Requesting that correction and deletion operations be notified to third parties to whom your data has been transferred
- Objecting to the occurrence of a result against you through the analysis of your processed data exclusively by automated systems
- Claiming compensation for damages arising from the unlawful processing of your personal data
8. How to Submit a Request
To exercise your rights listed above, you may contact us through the following channel: Email: support@astravera.io
Your request will be processed free of charge as soon as possible and within 30 days at the latest, depending on its nature.
If the process incurs an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.