Privacy Policy
1. Who we are
This website, u2aiperformance.com, and the application at app.u2aiperformance.com are operated by U2 AI Studio Teknoloji A.Ş. ("U2 AI Studio", "we"), a company registered in Türkiye; U2 AI Performance is a venture of that company. Registered office: Ahi Evran OSB Mah. Erkunt Cad. No: 3 İç Kapı No: 41, Sincan / Ankara, Türkiye. Registered at the Ankara Trade Registry Office under number 434199, MERSİS number 0883124471000001, tax office and number Sincan V.D. 8831244710. Phone: +90 850 346 82 82. Contact: [email protected]. KEP: [email protected].
2. What we collect
- Account data in the application: your email address, a salted PBKDF2-SHA256 digest of your password (the password itself is never stored) and the canvas content you enter (text blocks, revenue and cost lines, up to 64 KB).
- Session data: a random session token stored with your email address for seven days or until you sign out, carried by one strictly necessary cookie in your browser.
- Transaction security data: the IP address of sign-in and sign-up attempts, kept for fifteen minutes as a rate-limit counter, and a per-account attempt counter kept for one hour.
- Information you submit through the contact form on this website: name, work email, organisation if you share it, and your message.
- Basic technical data generated when you visit the website or the application (IP address, browser type, pages requested), processed by our hosting and content delivery provider for security and performance.
- On this website, fonts are served by Google Fonts; when pages load, your IP address is transmitted to Google to deliver the font files. The application loads no third-party resources.
3. Why we process it
- To create and operate your account and provide the panel: storing the canvas, computing the figures and producing the exports you request.
- To keep you signed in and to protect accounts against automated sign-in and sign-up attempts.
- To respond to your message and follow up on your request.
- To operate, secure and improve the website and the application.
- To comply with legal obligations applicable to us in Türkiye.
4. Sharing, transfer abroad and retention
We do not sell your personal data, and we do not read canvas content for product purposes, use it to train anything or disclose it to anyone. Account, session and rate-limit data are stored in Cloudflare Workers KV and contact form records in Cloudflare D1, services of Cloudflare, Inc. that replicate data across Cloudflare data centres, including data centres outside Türkiye. That transfer abroad is made in accordance with Article 9 of Law No. 6698, on the basis of the data processing terms in Cloudflare's service agreement and, for account data, the necessity of the transfer for the performance of the contract you entered by creating the account. Data may be disclosed where required by law. Account data is kept until you delete the account: deletion from the panel, confirmed with your password, removes the account, the canvas and every session on every device immediately, and is completed in all regions within about a minute. Contact messages are kept for as long as needed to respond and follow up, then deleted or anonymised.
5. This notice covers the website and the application
This notice concerns visitors to u2aiperformance.com and account holders of app.u2aiperformance.com. The canvas content you enter belongs to you; you can download it as JSON at any time and delete it together with the account. Cloudflare Web Analytics is not enabled on the website or in the application in this version; if it is enabled, it works without cookies and this notice will be updated first.
6. Your rights
Depending on your jurisdiction you may have the right to access, correct, delete or restrict processing of your personal data. Residents of Türkiye may exercise the rights listed in Article 11 of Law No. 6698 (KVKK); see the KVKK notice on this site. Account holders can delete their account and canvas directly from the panel. To exercise any other right, write to [email protected].