Privacy notice (KVKK)

This notice is provided by greeneyeapp as data controller under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK).

greeneyeapp, İstanbul, Türkiye, registered email (KEP): to be added before launch. For client data that agencies add to AILens, the agency is the data controller; we process that data on the agency's behalf.

Identity and contact: first and last name, email, phone (during payment). Customer transactions: billing details, subscription and payment records. Transaction security: hashed IP address, device information, sign-in and action logs. Marketing: email preferences, only if you opted in.

Setting up and running the membership and service contract, billing, keeping information secure, answering your requests, meeting legal obligations and, if you opted in, telling you about the product.

We rely on these grounds in Article 5 of the KVKK: setting up and performing the contract, meeting a legal obligation, establishing and protecting a right, and our legitimate interest provided it does not harm your fundamental rights and freedoms. For marketing messages and analytics cookies we rely on your explicit consent.

We transfer your data to our sub-processors to provide the service: the database, servers and email delivery (Amazon SES) are in the European Union (Frankfurt), Claude analysis runs in EU regions, incoming support correspondence is held by Hetzner Online in Germany, and error monitoring (Sentry), product analytics (PostHog) and rate limit counters (Upstash) are in the European Union. The AI measurement providers, the search result provider Serper and the OpenAI analysis API (used only as a fallback) are in the USA. On sign-up, contact and free check forms, Cloudflare Turnstile processes your IP address and browser signals for bot protection; Cloudflare's global network runs in many countries, including the US. Transfers abroad rely on safeguards under Article 9 of the KVKK, namely standard contracts. No name, email or account identity is sent to AI providers.

We transfer data to public authorities only when the law requires it.

We collect your data electronically through the sign-up, payment, contact and free check forms, through records created while you use the service, and through cookies.

Under Article 11 of the KVKK you have the right to learn whether your data is processed, request information, ask for correction or deletion, learn the third parties it was transferred to, object and claim compensation for damage.

You can send your request in writing to İstanbul, Türkiye, to the registered email address to be added before launch, or from the email address registered to your account. We answer free of charge within 30 days at the latest.

We keep your service data in the European Union: the database on Supabase (Frankfurt, Germany); job servers, backups, the report archive and sending of transactional emails (Amazon SES) on Amazon Web Services (Frankfurt, Germany); incoming support correspondence with Hetzner Online (Germany); and the web app on Amazon EC2 (Frankfurt, eu-central-1), with content delivered through the Amazon CloudFront edge network. Analyses such as answerability, sentiment and summaries run primarily on Claude models through AWS in European Union regions; we may use the OpenAI API (US) only as a fallback. For visibility measurement and brand snapshots we send the prompts you track and public site information to these providers: OpenAI, Google, Anthropic and Perplexity AI (US). For search result data we send search queries to Serper (US). These requests contain no personal data such as names, emails or account IDs, and the AI providers (OpenAI, Anthropic, Google, Perplexity AI) are configured not to use this data for model training. Limited data may also be transferred abroad for error monitoring (Sentry) and product analytics (PostHog, if you consent). On sign-up, contact and free check forms, Cloudflare Turnstile processes your IP address and browser signals for bot protection; Cloudflare's global network runs in many countries, including the US. These transfers rely on safeguards under Article 9 of the Turkish Personal Data Protection Law (KVKK), namely standard contracts.