Data Protection Notice (KVKK)
1. Data Controller
In accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by the data controller identified below:
- Data Controller: Elif Merttürk
- Email: mertturk@izmocecgimi.com
- Phone: +90 501 016 08 53
- Address: Kuledibi Mahallesi, Hopa / Artvin, Türkiye
This notice has been prepared to inform you about the processing of your personal data in connection with the services offered through izmocecgimi.com (the "Platform").
2. Personal Data Processed
The following categories of personal data may be processed within the scope of the Platform:
- Identity and Contact Data: Email address; relevant identity information if you sign in with Google/Apple.
- User Transaction and Profile Data: Target country, target program/major, career goals, education level, target exams, and language level entered during onboarding.
- Content Data: CV/résumé details, manifest texts, career and study plan inputs.
- Transaction Security Data: Technical data related to authentication and session management.
- Customer Transaction Data: Premium subscription status (payment/card details are not processed by izmoce; they are processed by Dodo Payments).
3. Purposes of Processing
Your personal data is processed for the following purposes:
- Creating and managing your membership account and authenticating you.
- Generating and providing AI-powered career plans, study plans, manifests, and CV content.
- Tracking your progress and generating development reports.
- Managing premium subscription processes (payment processing is carried out by Dodo Payments).
- Sending informational and transactional emails related to the service.
- Ensuring the security of the service and fulfilling legal obligations.
4. Legal Bases for Processing
Your personal data is processed under Articles 5 and 6 of the KVKK, based on the following legal grounds:
- Being directly related to the establishment or performance of a contract (membership and service agreement).
- Compliance with the data controller's legal obligations.
- The legitimate interests of the data controller, provided that your fundamental rights and freedoms are not harmed.
- Where necessary (particularly for international transfers and AI processing), your explicit consent.
5. Recipients of Personal Data and Purposes of Transfer
Your personal data is transferred to the following service providers in order to provide the service:
| Recipient | Data Transferred | Purpose | Region |
|---|---|---|---|
| Supabase (Lovable Cloud) | Authentication and all profile/content data | Data storage, authentication | EU (provider is US-based) |
| Anthropic (Claude API) | Profile/goal information (career plan, study plan, manifest, university research) | AI content generation | United States |
| Google (Gemini, via Lovable AI Gateway) | CV content and goal information; target job/country for future narrative | AI content generation | United States / global |
| Lovable AI Gateway | AI requests/responses (in transit) | Routing of AI requests | Global edge |
| Dodo Payments (Merchant of Record) | Payment and billing data | Payment, billing, tax, refunds | Global |
| Lovable email infrastructure | Account emails | Sending service emails | International |
6. International Transfers
Some of the recipients listed above process your data outside of Türkiye (US, EU, UK, etc.). Under Article 9 of the KVKK, international transfers are carried out based on your explicit consent and/or appropriate safeguards required by law. By using the Platform and approving the relevant explicit consent statements, you are deemed to have consented to these transfers.
7. Method of Collection
Your personal data is collected electronically through membership and onboarding forms on the Platform, the content you enter while using the service, and authentication processes.
8. Your Rights (Article 11 of the KVKK)
Under Article 11 of the KVKK, you have the right to:
- Learn whether your personal data is being processed,
- Request information if it has been processed,
- Learn the purpose of processing and whether the data is used in accordance with that purpose,
- Know the third parties to whom the data is transferred domestically or internationally,
- Request correction if processed incompletely or inaccurately,
- Request deletion or destruction,
- Request that correction/deletion be notified to third parties to whom the data was transferred,
- Object to any adverse outcome resulting from automated analysis,
- Claim compensation for damages arising from unlawful processing.
To exercise these rights, you may submit your requests to mertturk@izmocecgimi.com. Your requests will be concluded within the periods stipulated by law.
9. Minors
The Platform's target audience may include students and young users. The processing of minors' personal data is assessed within the framework of applicable law and, where necessary, based on parental/guardian consent.
10. Changes
This notice may be updated. The current version is always published on this page.
11. Contact
- Email: mertturk@izmocecgimi.com
- Data Controller: Elif Merttürk