Privacy Policy

1. Who we are & scope

This Privacy Policy is issued by Seyhun Akyurek (“we”, “us”, “our”), individual developer and AI Architect based in Dubai, United Arab Emirates. We are the data controller for personal data processed across all our offerings:

• Websites — seyhunakyurek.com and sub-paths (/apps, /offers, /demos, /contact, /developers,/projects, APIs under /api/*)
• AI tools & agents — interactive demos, assistants and automations delivered via the site, embedded widgets or standalone web apps (each an “AI Tool”)
• Consultancy & implementation services — AI readiness audits, advisory, architecture and delivery engagements, workshops and related deliverables (each a “Service”)
• Mobile & desktop applications — all apps published by Seyhun Akyurek on Apple App Store and Google Play (each an “App”), including free, paid and demo builds
• Support channels — contact form, email, scheduling links and any channel linked from the above

Together, “Products & Services” means websites, AI Tools, Services and Apps. If an App or AI Tool has supplemental in-product disclosures, those disclosures supplement — not replace — this policy. Where there is a conflict, this policy prevails unless the in-product notice is more restrictive.

2. Summary — plain language

3. What we collect

We collect data in three categories:

A. Data you provide directly

• Contact & inquiry data — name, email, company, role, message content submitted via the YouForm embed on /contact or by email.
• Scheduling data — if you book a call (e.g. Cal.com), name, email, timezone and meeting notes.
• App inputs — content you enter, upload or generate inside an App (prompts, files, preferences). We process this only to provide the requested feature.
• Support data — messages you send reporting bugs or requesting help, including attachments you choose to share.

B. Data collected automatically

• Device & technical data — device model, OS version, app version, language, time zone, IP address (truncated where possible), user-agent.
• Usage & diagnostics — screens viewed, features used, crash logs, performance metrics, error traces. In Apps this is anonymized or pseudonymized where feasible.
• Website analytics — page views, referrers, outbound clicks and CTA interactions, collected via privacy-respecting analytics with IP anonymization.
• Logs — request path, timestamp and edge logs retained briefly by our hosting provider (Vercel) for security and reliability.

C. Data we do NOT collect via Apps (unless explicitly disclosed in the App listing)

• Precise location (GPS) — not collected unless an App feature requires it and you grant permission.
• Contacts, photos/media, microphone, health or financial data — accessed only if the feature requires it and you grant permission; see §6.
• Advertising ID (IDFA / GAID) for cross-app tracking — we do not track you across apps or sites.

Data minimization: Every App requests the minimum permissions and data needed for its purpose. Features that can run on-device do so; server calls are made only when needed and are documented in the App’s store listing.

4. How we use data

• Provide, operate and improve the website and Apps (including testing, debugging and support).
• Respond to inquiries, schedule discovery calls and deliver requested audits / ROI maps.
• Authenticate requests and enforce rate limits (see /developers).
• Monitor stability and abuse (crash reporting, anomaly detection, performance analytics).
• Send transactional communications (confirmations, support replies). We do not send marketing emails without your consent.
• Comply with legal obligations and enforce our Terms of Use.

We do not use personal data for automated decision-making with legal effects, nor to build profiles for third-party advertising.

5. Legal bases

Where GDPR / UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) applies, we process personal data under: consent (you asked us to contact you or granted a permission), contract (to provide the App or service you requested), legitimate interests (security, product improvement, analytics — balanced against your rights), and legal obligation (where the law requires retention or disclosure). You may withdraw consent at any time without affecting prior processing.

6. App permissions & device access

Apps only request device permissions when a feature cannot work without them. The system permission dialog is shown first; access is granted only after you tap Allow, and you can revoke it at any time in iOS Settings → Privacy & Security or Android Settings → Apps → Permissions.

If you deny a permission, the related feature will be unavailable or degraded, but the rest of the App continues to work. The relevant store listing and in-app prompt describe exactly which permission each build requests.

7. Third-party services & SDKs

We use only processors necessary to run the site and Apps. Each acts under its own terms and privacy policy:

• Hosting & edge — Vercel (site, APIs, edge logs).
• App distribution & billing — Apple App Store and Google Play Store (downloads, updates, in-app purchases, subscriptions, refunds — see §9).
• Forms & scheduling — YouForm (contact form), Cal.com (call booking) when you interact with those widgets.
• Analytics & diagnostics — privacy-respecting web analytics (IP anonymized) and, in Apps where disclosed, crash/performance SDKs (e.g. Apple Crash Reports, Google Firebase Crashlytics / Analytics) limited to anonymized/pseudonymized metrics.
• Infrastructure — cloud providers used to host App back-ends where an App requires a server component (listed per-App in its store privacy details).

No personal data is shared with advertisers. Providers are instructed to process data only on our behalf and to delete it upon request where technically feasible. Their policies govern the cookies/SDKs they set.

8. How we share data

We do not sell personal data. We disclose it only:

• to the processors listed above, to operate the site and Apps;
• when you instruct us to (e.g., you ask us to share a report with your team);
• to comply with UAE law, court orders or regulatory requests; or
• to protect our rights, safety or property, or that of our users.

Aggregated or de-identified analytics (no personal data) may be used to describe product performance publicly (e.g., “fix X reduced crashes by Y%”).

9. Purchases, subscriptions & store payments

10. Retention

• Contact / support messages: 24 months after last contact, or until you request deletion — whichever is sooner.
• App inputs you save: until you delete them in-App or request deletion.
• Analytics & aggregated metrics: aggregated and retained 26 months, then deleted or anonymized.
• Server / edge logs: 30–90 days, then purged automatically.
• Backups: follow the same windows and are overwritten on rotation.

Where the law requires longer retention (e.g., tax or compliance records), we retain the minimum required and restrict access.

11. International transfers

We are based in the UAE, and data may be processed in the UAE, the EU, the United States and other locations where our providers operate. Where GDPR or PDPL cross-border rules apply, we rely on adequacy decisions, Standard Contractual Clauses or explicit consent as appropriate, and we apply the same safeguards regardless of location.

12. Security

We use HTTPS, HSTS, encryption in transit and at rest where applicable, least-privilege access, and Vercel-managed infrastructure. API endpoints enforce rate limiting (see /developers and the RateLimit headers in openapi.json) and structured JSON error responses. No method is 100% secure; if you believe an App or our site has a vulnerability, contact us promptly so we can address it.

13. Your rights

Under the UAE PDPL, GDPR (where applicable), and similar regimes, you have the right to request:

• access to and a copy of your personal data;
• correction of inaccurate or incomplete data;
• deletion (“right to be forgotten”) where there is no overriding legal basis to retain it;
• restriction or objection to certain processing;
• data portability (machine-readable export) where feasible; and
• withdrawal of consent at any time.

To exercise these rights, contact us at /contact. We respond within 30 days. You also have the right to lodge a complaint with your local data protection authority or the UAE Data Office. For Apps, you can also delete data directly in-App (where offered) and uninstall the App to stop further collection.

California / EEA / UK note: We do not sell or share personal data for cross-context behavioral advertising, and we do not use sensitive personal data for inferential purposes.

14. Cookies & similar storage

• Site: strictly necessary storage (localStorage) for UI preferences (e.g., theme). No advertising cookies are set by this site.
• Embedded widgets: YouForm and Cal.com may set their own cookies when you interact with them — governed by their policies.
• Apps: Apps do not use web cookies; they may use on-device storage (UserDefaults / SharedPreferences, Keychain / EncryptedSharedPreferences) strictly to keep you signed in, cache preferences and store content you save.

You can clear storage in your browser or reset an App’s data by removing and reinstalling it.

15. Children

Our site and Apps are not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided data, contact us and we will delete it promptly. Apps rated for younger audiences remain general-audience products and do not knowingly collect children’s personal data.

16. Do Not Track & choices

We honor requests to limit collection: use your browser’s “Do Not Track” or “Global Privacy Control”, decline optional permissions in Apps, opt out of analytics where offered, or contact us to object to processing. There is no way to use an App without the store provider knowing you downloaded it — that processing is governed by Apple’s and Google’s own policies.

17. Changes to this policy

Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notice on the site or in-App, and by updating the store privacy listings for affected Apps. Continued use after changes means you accept the updated policy. Previous versions are available on request.

18. Contact

Questions, requests or complaints about this policy or data handling:

If you are in the EU/EEA or UK, you may also contact your local supervisory authority. App Store billing disputes should be directed to Apple or Google as described in §9.