Privacy Policy

1. Overview

As Baksora Teknoloji Limited Şirketi ("Baksora", "we" or "Company"), we respect your privacy and care about protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you visit bakspro.com and use our BaksPro AI project writing services (project kits, AI credits, export features).

2. Information Collected

2.1 Information You Directly Provide

• During registration and login: Name, surname, email (including Google account login)
• During purchases: Billing information (name/title, national ID or tax number, address, city), payment details (processed via iyzico, card details are not stored by us)
• During project creation: Project information, institutional data, project goals and priorities

2.2 Automatically Collected Information

• IP address and country information (automatically detected via GeoIP - used for country-based pricing)
• Browser type and version
• Device information and language preference
• Page views and service usage data (AI credit usage, project count, etc.)
• Session and preference data collected through cookies

3. Cookie Policy

The following types of cookies are used on our website:

4. Use of Information

We use the information we collect for the following purposes:

• To provide BaksPro AI project writing services (fulfillment of KA1, KA210, KA220 project kits)
• To generate project content using advanced AI language models
• To provide EU policy research and academic research services
• To process payments via iyzico and issue invoices
• To apply country-based pricing (TRY/EUR)
• To fulfill legal obligations and ensure site security

5. Information Sharing

We do not share your personal information with third parties except in the following cases, and only to the extent necessary to provide the service:

• Payment Service Provider: iyzico Ödeme Hizmetleri A.Ş. (Türkiye) - for payment processing, PCI DSS compliant; your card details are not stored by us.
• Third-Party Providers: Your personal data is not transferred as personal data to third-party service providers such as artificial intelligence, infrastructure, error monitoring, email, or analytics. It is shared only with iyzico (Türkiye) for payment processing and, in case of legal obligation, with authorized authorities. Your personal data is not transferred abroad.
• Legal Requirements: With authorized institutions in case of court order or legal obligation.

6. Data Security

We apply industry-standard security measures to protect your data. The main application and user data are hosted in Türkiye (Izmir data center):

• 256-bit SSL/TLS encryption
• Secure payment infrastructure (iyzico - PCI DSS compliant, 3D Secure supported)
• Database encryption and access control (PostgreSQL)
• Regular security updates and Docker container isolation

7. Data Retention Period

We retain your personal data for as long as necessary for the purpose of collection or for as long as required to fulfill our legal obligations. Payment records are retained within legal retention periods (10 years). Project data is retained for the kit's read-only access period (12 months from purchase); at the end of this period it may be deleted subject to at least 30 days' prior notice by email. Upon account deletion request, your data is deleted within 30 days.

8. Your Rights

You have the following rights under KVKK and GDPR:

• Right to access your data
• Right to correction
• Right to deletion ("Right to be forgotten")
• Right to request restriction of processing
• Right to data portability
• Right to object

9. Contact

For questions about our privacy policy, you can contact us:

10. Changes

This Privacy Policy may be updated from time to time. We will notify you when significant changes are made. The most current version of the policy will always be published on this page.