KVKK Disclosure Notice

Last updated: 2026-09-28 · Version 2026-09-28

Under the Personal Data Protection Law No. 6698 (Kişisel Verilerin Korunması Kanunu, "KVKK"), as the data controller, OptiNode Bilişim Limited Şirketi (the "Company") processes the personal data of persons using our Sunum.App service (the "User") within the scope and for the purposes described below.

1. Identity of the Data Controller

Legal Name: OptiNode Bilişim Limited Şirketi
Product/Service: Sunum.App
Address: Alsancak Mah. Kıbrıs Şehitleri Cad. Yenice İş Merkezi No: 128 İç Kapı No: 2 Konak/İzmir
Tax Office / No: Kordon / 6440959793
MERSIS No: 0644095979300001
KEP Address (Registered Electronic Mail): optinode@hs01.kep.tr
Email: info@sunum.app
Website: https://sunum.app

2. Categories of Personal Data Processed

Our Company processes the following categories of personal data:

Identity information: first name, last name
Contact information: email address
Customer transaction information: account registration date, project history, order and invoice information, payment amount, order date
Transaction security information: IP address, session data, cookie records, user-agent information
Financial information: card details (processed on our bank's Virtual POS infrastructure and not stored by our Company), invoice/order information
User content information: PDF files you upload, website URLs you enter, texts you write, brand profile (company name, industry, slogan, color, logo)
Marketing information: explicit consent status for email marketing, campaign interaction data

3. Purposes of Processing Personal Data

Creating and managing the user account
Performing the service agreement (production of presentations, videos and visual content)
Carrying out AI-assisted content production (through 3rd party AI services)
Storing the generated content and making it available for download
Carrying out payment transactions and issuing invoices
Providing customer support services
Improving service quality, detecting errors and conducting security audits
Fulfilling legal obligations (tax legislation, E-Commerce Law, KVKK)
Content moderation — preventing the production of prohibited/inappropriate content
Marketing communications and campaign notifications where you have given explicit consent (commercial electronic messages under Law No. 6563; consent and opt-out records are kept in the Message Management System — İYS)

4. Legal Grounds for Processing Personal Data

Your personal data is processed on the following legal grounds under KVKK Articles 5 and 6:

Establishment and performance of a contract (Article 5/2-c): Carrying out transactions under the service agreement
Legal obligation (Article 5/2-ç): Tax, E-Commerce and KVKK regulations
Legitimate interest (Article 5/2-f): Service security, fraud prevention, quality improvement
Explicit consent (Article 5/1): Marketing communications and other data processing activities that are not necessary for the performance of the service

5. Transfer of Personal Data

Your personal data is transferred to the following domestic and international data processors under KVKK Articles 8 and 9 so that the service can be provided:

Domestic Transfers

Bank acting as payment service provider (Türkiye) — carrying out payment transactions
Certified Public Accountant / Accounting Service Provider (Türkiye) — fulfilling tax obligations
Hosting Provider (Türkiye) — running the application and data storage (servers located in Türkiye)

International Transfers

During AI-assisted content production, the content uploaded by the user and the production instructions are transferred to the following groups of US-based service providers. The transfer is carried out under KVKK Article 9 as amended by Law No. 7499; since there is no adequacy decision by the Board, it relies on appropriate safeguards under Article 9/2-b (standard contract / data processing agreements) and is additionally carried out with your explicit consent:

AI text and content analysis providers (USA) — analyzing brand information, generating scenario and narration texts
Image generation providers (USA) — generating banners, slides and scene visuals
Speech synthesis (text-to-speech) providers (USA) — generating voice-overs
Video generation providers (USA) — generating scene and talking-portrait videos
Content moderation providers (USA) — preventing prohibited/inappropriate content

The data transferred is limited to the content and instructions you provide for production: your brand information, the instructions you write, and the images and documents you upload. Your name, email, invoice and payment information are not transferred to these providers. You may request the trade names and the current list of our service providers by exercising your right of application under KVKK Article 11 at info@sunum.app.

Important: For international transfers, contractual obligations regarding data security and confidentiality are in place with the relevant service providers. Your data is processed by these providers within the framework of their own privacy policies. We inform you that if you do not give explicit consent, you will not be able to use the AI-assisted content production service.

6. Method of Collecting Personal Data

Your personal data is collected in electronic form through account creation on the website, project uploads, filling in the brand profile, making payments, submitting customer support requests, and automatic cookie/log collection during site visits.

7. Retention Period of Personal Data

Data Type	Retention Period
Account information	While the account is active + 3 years
Order and invoice records	10 years (as required by the Tax Procedure Law, VUK)
Generated content (PPTX/video/images)	Automatically deleted 1 day after first view; if never viewed, 7 days after generation
Uploaded source content (PDF/URL)	Completion of production + 30 days
Cookie and log records	2 years
Communication and support records	3 years
Data processed for marketing purposes	Until consent is withdrawn

8. Your Rights under KVKK Article 11

Under Article 11 of KVKK, you have the following rights:

To learn whether your personal data is being processed
To request information if it has been processed
To learn the purpose of processing and whether it is used in accordance with that purpose
To know the third parties to whom it is transferred domestically/abroad
To request correction if it is incomplete or incorrectly processed
To request deletion or destruction within the framework of KVKK Article 7
To request that correction/deletion/destruction operations be notified to the third parties to whom the data has been transferred
To object to a result against you arising from analysis carried out exclusively through automated systems
To claim compensation if you suffer damage due to unlawful processing

9. How Can You Exercise Your Rights?

To exercise your rights, you can fill out the application form in Sunum.App under Settings → My Account Data or apply through the following channels:

Email: info@sunum.app
KEP (Registered Electronic Mail): optinode@hs01.kep.tr
Post: Written application to Alsancak Mah. Kıbrıs Şehitleri Cad. Yenice İş Merkezi No: 128 İç Kapı No: 2 Konak/İzmir

Under the Communiqué on the Procedures and Principles of Application to the Data Controller, your applications are concluded free of charge within at most 30 (thirty) days. In the exceptional cases specified in the Communiqué, a fee may be requested.

10. Changes

We reserve the right to update this Disclosure Notice. Significant changes will be communicated to you via account notifications or email. The current version is always published on this page.