Privacy Policy

As OptiNode Bilişim Limited Şirketi, we attach great importance to the privacy and data security of Sunum.App users. This Privacy Policy explains what information we collect, how we use it and how we protect your data.

This policy should be read together with the KVKK Privacy Notice (Aydınlatma Metni). While the Privacy Notice provides more detailed legal information, this page summarizes the general framework of our applications.

1. Information We Collect

Information we receive directly from you

• When creating an account: name, email address, password (the password is hashed one-way and is never stored in plain text)
• Brand profile: company name, industry, slogan, brand color, logo
• Project inputs: website URL, PDF file, image descriptions, title
• Payment information: card details are processed on our bank's Virtual POS infrastructure and are not stored by our Company — only the order amount, order number and approval status are recorded

Information collected automatically

• Device and browser information (user agent, screen resolution, language)
• IP address (for security and fraud prevention purposes)
• Usage statistics (page visits, production steps)
• Cookies and similar technologies — see the Cookie Policy page

2. How We Use Information

• Providing the service, managing your account, delivering the generated content
• Providing customer support services
• Processing payments and issuing invoices
• Transfer to third-party AI providers for AI-assisted content generation (with explicit consent)
• Improving service quality, detecting errors, security audits
• Fulfilling legal obligations
• Marketing communications if you give explicit consent

3. Who We Share Information With

We will NEVER sell your personal data to third parties. We do not share it except in the following cases:

• Our service providers: AI text, image, audio and video generation providers, content moderation provider, the bank acting as payment service provider and our hosting provider — a data processing agreement is in place with each of them
• Legal requirements: Court order, prosecutor's request, tax audit
• Company transfer: In the event of a merger/transfer of the Company, to the acquiring entity while your rights are protected

3A. Google and Social Media Account Connections

If you wish, you can sign in with your Google account to Sunum.App and connect your YouTube, Instagram, Facebook, LinkedIn or X accounts to publish the content you create. These connections are entirely optional and are established only with your approval through the relevant platform's authorization (OAuth) screen.

• Sign in with Google: We receive only your name, email address and profile photo from Google; we use them to create and recognize your account. Your password is not shared with us.
• YouTube: We upload a video to your channel only for shares that you initiate (youtube.upload); your account name and profile image are taken from your Google profile. We do not read, delete or modify your videos, channel data, audience data or comments. You can remove the connection at any time from the Shares page or from your Google account's security settings.
• Other platforms: The account name, profile image and only the permission required to publish the posts you create are obtained.
• Access keys (tokens) are stored encrypted with AES-256-GCM on our servers, are not transferred to the browser or to third parties, and are deleted immediately when you remove the account. You can remove the connection at any time from theSettings → Social Media Accounts page or from the relevant platform's account settings (e.g. Google Account Permissions).
• We do not use this data for advertising, profiling, sale or AI model training; we process it only for the sign-in and publishing function that you request.

Sunum.App's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements of that policy.

4. Data Security

The technical and administrative measures we take to protect your data:

• SSL/TLS encryption — all web traffic is transmitted encrypted
• Bcrypt password hash — your passwords are stored using a one-way hash
• 3D Secure payment — card details are processed on the bank's Virtual POS infrastructure and never reach our servers
• Access control — only authorized employees can access the necessary data
• Regular backups — daily backups to prevent data loss
• Security logs — suspicious access attempts are recorded
• Content moderation — automated oversight that prevents the generation of prohibited content

5. Data Retention Periods

Your personal data is stored only for as long as necessary for our legal obligations and for the performance of the service. For detailed retention periods, see KVKK Privacy Notice — Article 7.

• Generated outputs (video, image, presentation, audio): deleted from the server 1 day after you first view the output page; if you never view it, it is retained for 7 days. The copy you download remains with you.
• Social media sharing media: retained until the scheduled post is published, and deleted when it is published or canceled.
• Social account access keys: until you remove the account.
• Account information: until you delete your account; you can submit your account deletion request from the KVKK & My Data page.

6. Children's Privacy

The Sunum.App service is not designed for persons under 18 years of age. We do not knowingly collect personal data from persons under 18. If any such information is identified, it is deleted immediately.

7. International Data Transfer

Because AI services operate through US-based providers, content uploaded by the user is transferred to these providers. The transfer is carried out with your explicit consent in accordance with Article 9 of KVKK (Personal Data Protection Law No. 6698).

8. Your Rights

To exercise your rights under Article 11 of KVKK, see the KVKK Privacy Noticeor contact us at info@sunum.app.

9. Contact

For questions about our privacy practices: info@sunum.app

10. Changes

This policy may be updated. Significant changes will be notified by email. The current version is always published on this page.