Privacy Policy

Under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data may be processed by Muhammed Nurullah Cem Ikbal Yilmaz (Ikbal Mimarlik Ic Mimarlik — sole proprietorship; "Company") as the data controller, within the scope described below.

Tax Office: Beylikduzu
Address: Talatpasa Mah. Pazaryolu Cad. Sedai Plaza No: 2 Ic Kapi No: 21 Esenyurt/Istanbul, Turkey
Email: ai.nonform@gmail.com
Phone: +90 535 679 55 19

Text version: 2026-08

The following personal data may be collected through our platform:

• Identity: Name, surname
• Contact: Email address, and your telephone number where you provide it
• Account: Basic profile information received from your Google account if you sign in with Google
• Transaction: Order and payment history, plan/credit balance, service usage records
• Consent records: Consent type, text version, date, IP address and browser information relating to your agreement, pre-contractual information and withdrawal statements (obligation of proof)
• Technical: IP address, browser and device information, cookie data
• Content: Images you upload to the platform and the project/measurement details you enter

No special categories of personal data are collected. Please do not upload files containing special categories of data (health, biometric, etc.) to the platform.

Your personal data is processed on the legal grounds set out in Article 5 of the KVKK, for the following purposes:

• Membership registration, provision of the service, payment and invoicing — being directly related to the conclusion or performance of a contract
• Statutory retention, tax and consumer legislation obligations, and keeping consent records — compliance with the data controller's legal obligations
• Platform security, prevention of abuse and fraud, measuring and improving service quality — legitimate interest, provided it does not harm your fundamental rights and freedoms
• Non-essential cookies and commercial electronic messages — your explicit consent (which you may withdraw at any time)

No processing for the purpose of training artificial intelligence models: The content you upload to the platform (images, drawings, plans, project and measurement data) is not used to train or develop our artificial intelligence models and is not transferred to third parties for that purpose; it is processed solely so that the service you request can be provided. The parties to whom data is transferred while the service is provided are listed in sections 4 and 5.

Your personal data may be transferred, on a limited and proportionate basis, to the following parties so that the service can be provided:

• Payment institution (iyzico): carrying out the payment transaction
• Hosting, cloud and infrastructure providers: operating the platform, storing and backing up data
• Email and notification providers: transactional and informational emails
• Artificial intelligence processing providers: only when you request image generation, and only the data required for that operation
• Accounting/financial advisors and legal counsel: within the scope of legal obligations
• Authorised public institutions and organisations: in the cases prescribed by legislation

Part of the platform's hosting, cloud storage, email and artificial intelligence processing infrastructure is operated by providers established abroad. For this reason, your personal data may be transferred abroad so that the service can be provided.

Transfers are made in accordance with the tiered regime set out in Article 9 of Law No. 6698, as amended by Law No. 7499 and in force since 1 June 2024:

1. transfer to countries declared by the Board to provide adequate protection,
2. where there is no adequacy decision, the provision of the appropriate safeguards foreseen in the Law (standard contract, binding corporate rules, etc.),
3. where neither is available, the existence of the exceptional circumstances listed in the Law — in particular the transfer being mandatory for the conclusion or performance of a contract, or your explicit consent.

To request up-to-date information about the providers and countries involved in such transfers, you may contact ai.nonform@gmail.com.

Note: where the standard contract method is used, notification must be made to the Personal Data Protection Authority within five working days of the contract being signed.

Your personal data is collected electronically by automated and non-automated means, including through membership and contact forms, Google sign-in, purchase and consent flows, your transactions on the platform, support correspondence and cookies.

Your personal data is retained for the periods required by the processing purpose and prescribed by legislation:

• Membership and account data: for the duration of membership; after the account is deleted it is destroyed, without prejudice to statutory limitation periods
• Payment, invoice and financial records: ten (10) years pursuant to the Tax Procedure Law and related legislation
• Records of information, withdrawal and performance relating to distance sales: three (3) years pursuant to the Distance Contracts Regulation
• Consent records: for the period the consent is valid and thereafter, for the purposes of proof, for the limitation period
• Technical log records: for a reasonable period for security purposes

When the period expires or the processing purpose ceases to exist, your data is deleted, destroyed or anonymised.

Technical and administrative measures aimed at ensuring an appropriate level of security are taken in order to prevent the unlawful processing of and access to your personal data and to ensure its safekeeping: encrypted connections in transit (SSL/TLS), access authorisation, irreversible storage of passwords, payment data never being held by us, logging and backup.

Under Article 11 of the KVKK you have the right to: learn whether your personal data is being processed, request information if it has been processed, learn the purpose of processing and whether the data is used in accordance with that purpose, know the third parties to whom it is transferred domestically or abroad, request its correction if it has been processed incompletely or inaccurately, request its erasure or destruction, request that correction/erasure operations be notified to the third parties to whom the data has been transferred, object to a result arising against you from analysis carried out exclusively through automated systems, and claim compensation if you suffer damage due to unlawful processing.

For application methods and time limits, please see our KVKK Application Form page.

Our platform uses essential, preference and measurement cookies. Non-essential cookies are run only with your explicit consent, and you may withdraw your consent at any time. For details, please see our Cookie Policy page.

Photographs and images you upload to the Render Studio, together with intermediate images derived from them (e.g. depth and edge maps), are transmitted to the servers of our image-processing infrastructure provider located in the United States for the purpose of carrying out image generation. This transfer is necessary for the performance of the service; by uploading an image to the Render Studio you accept that your image is transferred abroad for this purpose (Article 9 of Law No. 6698). Your images are processed on the provider's side only for the purpose of generation; temporary copies may be retained for a limited period subject to the provider's retention policy (the provider may retain files for at least seven (7) days), and you may request their deletion through our application channels under the KVKK, while the resulting output files are stored in your account on the nonform infrastructure. Please take care that the images you upload do not contain personal data belonging to third parties (faces, vehicle plates, identity/address information, etc.); responsibility arising from uploading such content rests with the uploader. Your images and the generated outputs are not used to train artificial intelligence models (Terms of Use — Prohibition on model training). You may delete your images from your account at any time; you may exercise your rights of erasure and data export through our application channels under the KVKK.

This policy may be updated when necessary. Updates take effect on the date they are published on our platform; registered users are additionally informed of material changes. Last update: August 2026 (version 2026-08).