Privacy Policy

1. Data Controller

This Privacy Policy describes how CanAI ("Company") processes personal data of visitors and contact form users of the website operated at https://canai.com.tr ("Site"), in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and applicable international data protection principles.

Contact: info@canai.com.tr

2. Personal Data Processed

• Identity and contact data: Name, email address, subject and message content that you provide when submitting the contact form.
• Technical data: IP address, browser information, language preference, date and time of visit, referring page. Such data is collected automatically via Cloudflare infrastructure and server logs.

3. Purposes of Processing

• To respond to your inquiries and communicate with you;
• To evaluate partnership, investment, press and career applications;
• To ensure security of the Site and prevent misuse (e.g. bot and spam protection via Cloudflare Turnstile);
• To monitor service quality and diagnose errors or performance issues;
• To fulfill our obligations arising from applicable legislation.

4. Legal Basis for Processing

Your personal data is processed on the following legal bases (KVKK art. 5):

• Explicit consent: When you submit the contact form (KVKK 5/1).
• Performance of a contract: During partnership / contractual relationships (KVKK 5/2-c).
• Compliance with a legal obligation: Where required by law (KVKK 5/2-ç).
• Legitimate interest: Site security, fraud and abuse prevention (KVKK 5/2-f).

5. Data Transfers

Your personal data may be transferred to the following parties, only to the extent necessary to fulfill the purposes set out above:

• Service providers: Hosting, email, CDN and security infrastructure providers (e.g. Cloudflare, Inc. / United States; our hosting provider / Türkiye).
• Public authorities: Where required by our legal obligations.

Cross-border transfers are carried out in accordance with KVKK art. 9, based on your explicit consent or other conditions provided under the law.

6. Retention Periods

• Contact form records: up to 2 years after the inquiry is resolved;
• Server access logs: 30 days;
• Cloudflare security logs: up to 30 days per Cloudflare policy.

Data subject to statutory retention obligations is kept for the period required by law.

7. Your Rights (KVKK art. 11)

You have the right to:

1. Learn whether your personal data is being processed;
2. Request information if it has been processed;
3. Learn the purpose of processing and whether data is used in line with such purpose;
4. Know third parties to whom data is transferred, domestically or abroad;
5. Request correction of incomplete or inaccurate data;
6. Request deletion or destruction under conditions provided by KVKK;
7. Request notification of such corrections / deletions to third parties to whom data has been transferred;
8. Object to outcomes against you arising from automated analysis;
9. Claim compensation for damages arising from unlawful processing.

8. How to Exercise Your Rights

To exercise your rights, please submit a written request together with documents verifying your identity to info@canai.com.tr. We will respond to your request free of charge within 30 days, pursuant to KVKK art. 13.

9. Cookies

For information about the cookies used on our Site, please review our Cookie Policy.

10. Updates

We may update this Privacy Policy in response to changes in legislation or our business processes. The current version is always published on this page; the "Last updated" date above reflects the most recent revision.