Privacy Policy
What personal data askvisibly collects, why, who receives it, how long we keep it and how to use your rights under the GDPR and KVKK.
Last updated
On this page
Who is responsible
Softween Yazilim Ltd. Sti. (Softween Yazılım Limited Şirketi), Ankara Cad. Yenişehir, 360 Office No:405 Kat:2 Ofis:17, 34912 Pendik, Istanbul, Türkiye, is the controller of the personal data described here: the “veri sorumlusu” under Turkish Law No. 6698 (KVKK) and the controller under the GDPR. Contact: hello@askvisibly.softween.com.
What we collect
We store scan answers and email addresses, plus the data in the table. We do not store card numbers, and we do not sell personal data. A brand name can be a person’s name; in that case the public report shows it.
| Data | What it contains | When |
|---|---|---|
| Account | Your email address, sign-in events and a session cookie. | You sign in. |
| Scans and reports | The domain, brand name and aliases you enter, the prompts we write, each engine’s answer, the sources it cited and the scores. Reports are public by default. | You or anyone else scans a domain. |
| Billing | Plan, status, renewal date and Paddle customer and subscription ids. Card details go to Paddle and never reach us. | You subscribe. |
| Messages | The name (optional), email and message from the contact form, and the email you leave for the payment launch notice. | You write to us. |
| Emails we send | Sign-in links, scan-complete notices, the weekly digest (switch it off in settings) and alerts on Pro. | You use the account. |
| Technical data | Your IP address, used in rate-limit counters and abuse control, and the standard request logs of our hosting provider. | You visit or call the service. |
| Free tools | The domain you enter is used to fetch public pages and is not stored. The llms.txt generator sends page titles and descriptions of that domain to an AI model. | You use a tool. |
Why we use it
- To provide the service you asked for: your account, scans, billing and emails (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
- For our legitimate interests in security, rate limiting, abuse prevention and improving the product (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
- To keep the tax and accounting records the law requires (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
- With your consent where the law asks for it, for example optional cookies.
Who receives data
These providers process data for us. Prompts are written from public information about a brand and never contain your account email. Each provider’s own policy covers what it does with the data it receives.
| Provider | What it does for us | What it receives |
|---|---|---|
| Cloudflare | Hosting, network and database (Workers, D1). | Everything the service handles, including IP addresses. |
| Paddle.com Market Ltd | Payments as merchant of record. | Your email, billing details and payment data. It sends us ids and subscription status. |
| Resend | Sending email. | Your email address and the content of the message. |
| OpenRouter | Routing some engine and prompt-writing calls. | Prompt text. No account data. |
| Anthropic | The Claude engine, and a backup writer for prompts and llms.txt files. | Prompt text, and for the llms.txt generator the page titles and descriptions of the domain you enter. |
| The Gemini engine, and prompt and llms.txt writing. | Prompt text, and for the llms.txt generator the page titles and descriptions of the domain you enter. | |
| DataForSEO | Google AI Overview results for paid scans. | Prompt text. |
| PostHog | Product analytics. | Page views, actions such as starting a scan, and a random browser identifier. |
Transfers abroad
Several providers process data outside Türkiye and the European Economic Area, including in the United States. Where Turkish or EU law requires a safeguard for such a transfer, we rely on the safeguards the provider offers, such as standard contractual clauses, or on your explicit consent where the law asks for it.
How long we keep it
- Account and brands: until you delete your account or ask us to.
- Scan results: while the report exists. Your dashboard shows history for 30 days on Free, 90 on Starter and 365 on Pro.
- Sign-in links expire after 15 minutes. Sessions last 30 days.
- Billing records: as long as tax and accounting law requires.
- Contact messages: until your request is handled and any follow-up is done. We delete them on request.
- IP addresses: in rate-limit counters, which are not linked to your account, and in our hosting provider’s request logs under its own retention rules.
Your rights
Under the GDPR you can ask for access to your data, correction, deletion, restriction, a portable copy, and you can object to processing or withdraw consent. Under KVKK Art. 11 you can ask whether your data is processed, request information about it and its purposes, learn which third parties receive it at home and abroad, ask for correction or deletion, ask that those steps be reported to recipients, object to a result that harms you and claim compensation for damage.
Email hello@askvisibly.softween.com from the address on your account. We answer within 30 days. You can also complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) or to the supervisory authority in your EU or EEA country. We make no decisions about you by automated means that have legal effect.
Cookies and local storage
We use one essential cookie and no advertising or cross-site tracking cookies.
| Name | Purpose | Lifetime |
|---|---|---|
| av_session | Keeps you signed in. Essential, first party, httpOnly and secure. | 30 days |
| theme (local storage) | Remembers light or dark mode. First party. | Until you clear it |
| Paddle checkout | Paddle sets its own cookies for payment and fraud prevention when you open the checkout. See Paddle’s policy. | Set by Paddle |
| Analytics (PostHog) | Counts page views and actions. May store a random identifier in a cookie or local storage. | Set by PostHog |
Security
Traffic uses HTTPS. Sign-in links are stored as hashes and stop working after 15 minutes. Payment details never reach our servers. No system is perfectly secure. If a breach affects your data, we tell you and the authorities as the law requires.
Children
askvisibly is for businesses and is not aimed at people under 18. We do not knowingly collect their data.
Changes and contact
We may update this policy. The date at the top shows the current version, and we email account owners before a material change. Questions: hello@askvisibly.softween.com or the contact page.