Privacy Policy
1. Introduction
This Privacy Policy explains how izmoce (the "Platform", "we", "us") collects, processes, stores, and protects the personal data of individuals ("user", "you") who use our AI-powered career planning, manifestation, and CV-building services.
The Platform is a web-based service accessible at izmocecgimi.com.
Business owner and data controller:
- Business Owner (Data Controller): Elif Merttürk
- Email: mertturk@izmocecgimi.com
- Phone: +90 501 016 08 53
- Address: Kuledibi Mahallesi, Hopa / Artvin, Türkiye
By using the Platform, you agree to the data processing practices described in this Privacy Policy.
2. Data We Collect
2.1. Data You Provide Directly
- Account information: Email address, password (stored in hashed/encrypted form), and, if you sign in with Google or Apple, the related authentication identifiers.
- Profile and goal information: Target country, target program/major, career goals, education level, target exams, English/language level, and similar academic/career information you enter during onboarding.
- Content data: CV/résumé details you enter, your manifest texts, and your career and study plan inputs.
- Progress data: Completed tasks, study streaks, daily activity logs, and development data.
2.2. Automatically Collected Data
- Technical data: Technical information necessary for authentication and session management (e.g., session tokens).
- No third-party analytics, tracking, or advertising tools are used on the Platform (no Google Analytics, Meta Pixel, PostHog, etc.).
For details on the cookies and similar technologies we use, please see our Cookie Policy.
2.3. Payment Data
Premium subscription payments are processed by Dodo Payments acting as the Merchant of Record. Your card details are never collected, seen, or stored by izmoce. All payment information is processed and stored directly by Dodo Payments. For more information, please refer to Dodo Payments' privacy policy.
3. Purposes of Processing
- To create and manage your account and authenticate you.
- To generate personalized career plans, study plans, manifests, and CV content for you.
- To operate our AI-powered features (described in Section 4).
- To track your progress and provide development reports.
- To manage your premium subscription (payment processing is handled by Dodo Payments).
- To send service-related emails (account verification, password reset, etc.).
- To ensure the security of the service and to comply with our legal obligations.
4. AI Providers and Data Processing
The Platform uses artificial intelligence (AI) providers to generate personalized content. When you use AI features, the data necessary to generate the relevant content is transmitted to the following providers:
4.1. Anthropic (Claude API)
- Features: Career plan generation, weekly study plan/task generation, manifest (future narrative) generation, and university research/interpretation.
- Data transmitted: Profile/goal information you entered during onboarding, such as target country, target program, education level, target exams, and language level (varies by feature).
- Processing region: United States (international transfer).
- Under Anthropic's commercial terms, this data is not used for model training; limited logs may be retained for security/abuse purposes for a limited period (generally up to 30 days).
4.2. Google (Gemini), via Lovable AI Gateway
- Features: The CV "Enhance with AI" feature (personal statement/summary generation) and the "Future Self" narrative feature.
- Data transmitted: In the CV feature, the CV content you enter, target position/country/university, and tone preference; in the "Future Self" feature, target job and target country. (Your name is not actively sent in these calls.)
- Transfer path: The request is routed through the Lovable AI Gateway (a proxy service) to Google's AI infrastructure.
- Processing region: United States / global Google infrastructure (international transfer).
- Under Google's enterprise/API terms, this data is not used for model training; operational logs may be retained.
4.3. General Principles
- AI calls do not include your email address, password, payment information, or IP address.
- AI-generated content (career plan, manifest, CV text, etc.) is stored persistently in our database in association with your account (Section 6).
5. Third Parties We Share Data With (Service Providers)
Your data is shared with the following service providers only to the extent necessary to provide the service:
| Provider | Data Processed | Purpose | Processing Region |
|---|---|---|---|
| Supabase (Lovable Cloud infrastructure) | Authentication (email, hashed password, OAuth sessions), all profile and content data | Data storage, authentication | European Union (typically Frankfurt); provider is US-based |
| Anthropic (Claude API) | Data described in Section 4.1 | AI content generation | United States |
| Google (Gemini, via Lovable AI Gateway) | Data described in Section 4.2 | AI content generation | United States / global |
| Lovable AI Gateway | AI requests/responses (in transit as proxy) + usage telemetry | Routing of AI requests | Global edge infrastructure |
| Dodo Payments (Merchant of Record) | Payment and billing data (card details held directly by Dodo Payments) | Payment processing, billing, tax, refunds | Global (payment infrastructure) |
| Lovable email infrastructure | Your account emails (verification, password reset, etc.) | Sending service emails | Lovable infrastructure (international) |
Apart from these, your data is not shared with, sold to, or rented to third parties unless required by a legal obligation or a request from a competent authority.
6. Data Retention
- Your account and content data are retained for as long as your account is active.
- AI-generated content (manifest, career plan, study plan, CV texts, etc.) is stored persistently in our database in association with your account.
- When you delete your account, your personal data is deleted or anonymized within a reasonable period, subject to any legal retention obligations.
- Requests sent to AI providers are not separately stored on izmoce's side; for the providers' logging policies, see Section 4.
7. International Data Transfers
Some of the service providers listed in Section 5 process your data outside of Türkiye (in the US, EU, UK, etc.). These transfers are necessary to provide the service and are carried out, where required, based on your explicit consent and/or appropriate safeguards under applicable law (including Article 9 of the Turkish Personal Data Protection Law No. 6698). For details, see the Data Protection Notice.
8. Data Security
We take reasonable technical and administrative measures to protect your data against unauthorized access, loss, or misuse (including password hashing, secure authentication, and access restrictions). However, no internet-based service is 100% secure; we do our best to protect your data.
9. Your Rights
Your rights under applicable data protection law are described in detail in the Data Protection Notice. In summary, you have the right to access, rectify, or erase your data and to object to its processing. You may submit your requests to mertturk@izmocecgimi.com.
10. Children's Privacy
The Platform is a service whose use may be subject to a minimum age requirement. The use of the Platform by minors is assessed within the framework of applicable law and the Terms of Service.
11. Changes
This Privacy Policy may be updated from time to time. Material changes will be announced through the Platform. The current version is always published on this page; the "Last updated" date indicates the most recent version.
12. Contact
For any questions or requests regarding privacy:
- Email: mertturk@izmocecgimi.com
- Data Controller: Elif Merttürk