Privacy policy

This notice explains, in the context of this website and the Feza workspace, which personal data Feza processes, for what purpose and on what basis, to the extent that we are the data controller for that processing. The text below is a placeholder written to the shape of the document. It has not been through legal review and states no legal opinion.

Questions about data protection can be sent to [contact email address].

1. Data controller and contact details

This section covers the data controller, the contact details and how to reach the data protection officer. For the processing described in this notice, the data controller within the meaning of the applicable data protection legislation is:

[Company legal name]
Rumelifeneri, Sarıyer Rumeli Feneri Yolu
34450 Sarıyer/İstanbul
Türkiye
Email: [contact email address]

Whether a data protection officer has been appointed and how to reach that role is stated in [data protection contact address]. A request can also be sent to the address above so that it is passed on to that role.

2. What data we collect and why

a. When you visit our website

When you visit our website, our servers automatically process certain technical information in order to establish the connection and send the pages you request. This usually covers the network address of the requesting device, the date and time of the request, the page requested, the response status, the amount of data transferred, and the browser and operating system your device reports.

This processing is necessary for the site to run securely and reliably, and it rests on our legitimate interest in providing a working, secure service. This data is retained only for this purpose and for as long as it is necessary to detect and investigate security incidents.

b. Creating and using an account

To create an account we process what you give at registration: your name, your organizational email address and the organization you belong to. This processing is necessary to perform the contract between us or, where the customer is your organization, the contract made with that organization.

While you use Feza we process usage and configuration data: the settings you choose, the teams and projects you belong to, and records of significant actions taken in the account. Administrators in your organization can see some of this information in order to manage the account.

c. Content you submit

Content that you or your organization submit to Feza is processed in order to provide the service and in line with your instructions. Feza does not train models on customer content.

d. When you contact us

When you reach us by email, by form or through a support channel, we process the information you give together with the message metadata to handle your request. The legal basis is performance of the contract where your request concerns one, and otherwise our legitimate interest in answering questions.

e. Marketing messages

When you ask to receive updates, or where the applicable legislation allows us to contact existing customers about similar services, we process your contact details and your interaction with those messages. You can withdraw your consent or object at any time through the link in every message or at [contact email address].

3. How we process data

a. Purposes and legal bases

We process personal data in order to provide Feza and keep it secure, to meet our contractual obligations, to comply with the legal obligations we are subject to, and for our legitimate interests to the extent that your rights and freedoms do not override them. Where we rely on explicit consent, you can withdraw your consent at any time with effect for the future.

b. Recipients and data processors

We work with service providers to host infrastructure, to send transactional messages, to provide support tools and to run model inference under our documented instructions. These providers act as data processors and are bound by written contracts. For this website and our commercial communication, the main parties we work with are:

• Hosting and content delivery: Vercel — publishing this website.
• Analytics: Google — usage measurement with Google Analytics 4, only where you have given consent.
• Customer relationship management and marketing messages: HubSpot — your contact details and correspondence are held there when you reach out to us or choose to receive updates.
• Advertising platforms: Meta and LinkedIn — we run and measure our campaigns on these platforms. Their measurement code does not run on our website, so visiting our site is not by itself passed to these platforms.

A current list of the categories of data processor is provided on request at [contact email address].

c. Transfers abroad

When personal data leaves the region in which it was collected, the transfer rests on the mechanism recorded in [transfer mechanism] and on additional measures assessed case by case. You can request a copy of that record at [contact email address].

d. Retention

We retain personal data for as long as it is necessary for the purposes described in this notice, and after that for as long as it is necessary to comply with statutory retention obligations or to establish, exercise or defend legal claims. When the purpose or the obligation no longer exists, the data is deleted or irreversibly anonymized.

e. Security

We maintain technical and administrative measures appropriate to the risk. These measures are described in [description of technical and administrative measures]. How the access scope is computed and where it is applied is described on the security page. No method of transmission or retention is completely secure. This notice claims no certification, audit result or test result.

4. Cookies and similar technologies

Our website uses cookies and similar technologies such as local storage. Necessary cookies are required for the site to work and for the choices you make to be remembered; they are set on the basis of our legitimate interest and cannot be turned off from the consent banner.

Optional analytics cookies are set only with your explicit consent. A consent banner is shown on your first visit. Until you choose “Accept all”, no analytics cookie is written and no request is sent to the measurement provider; the measurement code is not even loaded. You can change your choice at any time through cookie settings, and you can delete cookies from your browser at any time. If you decline, analytics cookies already set are deleted.

• Necessary: security, load balancing and the record of your cookie choice.
• Preferences: the language and interface settings you choose.
• Analytics: aggregate usage measurement, set only with consent.

a. About analytics measurement

Where you give consent, measurement is carried out with Google Analytics 4. For users in the European Economic Area the provider is Google Ireland Limited, acting as a processor for this purpose. What is measured is the pages you visit, the links and buttons you click, how far you scroll, your language and approximate location, your device and browser, and the source you arrived from. Your IP address is not stored in the measurement service, and location is derived only at an approximate level. Data may be transferred to the United States; that transfer rests on the provider’s standard contractual clauses and on its commitment under the EU–U.S. Data Privacy Framework.

Measurement data is not used for advertising. Advertising cookies, advertising identifier sharing and ad personalisation are kept off in all cases, independently of your consent. Visitor-level records are retained for at most 14 months and are deleted automatically at the end of that period. If your browser sends a Global Privacy Control signal, analytics cookies are treated as declined without being offered to you.

5. Automated decision-making and profiling

We do not use automated decision-making that produces legal effects concerning you or similarly significantly affects you. Where we use aggregate usage information to improve the service, that analysis is not used to make decisions about individual users.

6. Your rights as a data subject

Subject to the conditions of the applicable legislation, you have the following rights in respect of your personal data:

• the right to learn whether processing is taking place and to access the relevant data;
• the right to request that inaccurate data be corrected and that incomplete data be completed;
• the right to request that the data be deleted where one of the statutory grounds applies;
• the right to request that processing be restricted in the cases provided for by law;
• the right to receive the data you provided in a structured, machine-readable format and, where technically feasible, to request that it be transferred to another data controller;
• the right to object to processing based on legitimate interest and, at any time, to processing for direct marketing purposes;
• the right to withdraw consent at any time with effect for the future.

To exercise one of these rights, write to [contact email address]. If you use a workspace managed by your employer, we may have to direct the request to that organization where it is the data controller for the processing concerned.

You also have the right to lodge a complaint with a supervisory authority, in particular in the place of your habitual residence, your place of work or the place of the alleged infringement.

7. Changes to this privacy policy

We may update this notice to reflect changes in the service, in our processing practices or in legal requirements. The version and date at the top of the page show the current publication. If a change is significant, we will give notice inside Feza or by email before it takes effect.

Questions about this notice can be sent to [contact email address].