Who is responsible for your data
Stela Media Ltd, Göksu Mah. Ertuğrulbey Cd. Meydan Eryaman No:2/2 D:25, 06820 Etimesgut / Ankara, Türkiye
Brand: Ankara Yazılım®
Email for personal data requests: [email protected]
Phone: 0850 840 11 09
What we process
When you use Bozok we process:
- Account: your name, email address, language preference and a one-way hash of your password. We never store your password in plain text.
- Sessions: your IP address, browser details and when each session started and ends.
- Payments: your Stripe customer number, subscription status and credit history. Card details never reach us; Stripe processes payments and keeps the invoices.
- Content: the text you write for your videos and the voice and video files we make from it.
- Images: the reference and brand images, logos and cover images you upload.
- AI prompts: the prompts, and the images attached to them, that we send to service providers to generate text, images, voice and video.
- Channel data: if you connect a channel, its name, ID, videos, statistics and the access tokens we use to publish. Tokens are stored encrypted.
- Consent record: who gave or withdrew consent to transfer data abroad, and when.
- Technical logs: server logs kept to find errors and abuse.
Why we process it
- To open your account, make your videos and run your subscription. Legal basis: performance of a contract.
- To meet invoicing and tax obligations. Legal basis: legal obligation.
- To keep the service secure and prevent abuse. Legal basis: legitimate interest.
- To transfer your data to the providers abroad for AI generation and channel publishing. Legal basis: explicit consent (KVKK Articles 5/1 and 9).
- To send account verification and password reset emails. These leave from our own mail server.
International transfers
Google, OpenAI, Anthropic, ElevenLabs, Meta and TikTok are abroad, mostly in the United States. Our servers are in the European Union.
Data goes to these providers under Article 9 of Turkish Law No. 6698 (KVKK) only on your explicit consent. The workspace owner or an admin gives it. Consent is collected separately from sign-up, the terms and every other form, in its own step with its own button, and the full consent text is shown next to the box. Until consent is given, no data is sent to these providers and the features that depend on them do not work.
You can withdraw your consent at any time on the Settings page. Withdrawing stops new transfers and the features that depend on them. It does not undo transfers already made.
Payment (Stripe) and network security (Cloudflare) services are needed for you to pay and to use the site, so they run during payment and use without a separate consent step. Card details never reach us.
Turkish narration is produced only on our own voice service. The text you write for a video is not sent to another company to be voiced. If that changes, this notice is updated first and your consent is asked for again.
How long we keep it
- Account data: while your account is open. When you ask us to delete it, we do so within 30 days.
- Video projects: the text you wrote and the voice and video files are deleted 90 days after the project finishes. Download the videos you want to keep before then.
- Session records: deleted when you sign out or when the session expires.
- Technical logs: kept at a limited size; older entries are removed as new ones arrive.
- Payment and invoice records: as long as the law requires.
Your rights
You can ask whether we process your data, get a copy of it, have it corrected or deleted, restrict or object to its processing and take it to another service.
Write to [email protected] from the email address on your account. We answer within 30 days. If you are not satisfied, you can complain to your data protection authority.
Security
The connection between your browser and our site is encrypted. Passwords are hashed, access to production servers is limited to authorised people and secrets are kept in a separate vault.