Gizlilik Politikası

Last updated: 02.10.2026

1. Data Controller

This Privacy Policy explains how your personal data is collected, processed and stored by Codex4Less ("Platform"). The data controller is:

**Brand:** Codex4Less

**Web:** codex4less.com

**Contact:** [email protected]

The Platform fulfills its obligations arising from Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the European Union's General Data Protection Regulation (GDPR).

2. Data We Collect

Codex4Less collects the following data to provide its services and improve the user experience:

### 2.1 Account Information

Username

Email address

Password (stored encrypted with strong hashing algorithms, never kept in plain text)

### 2.2 Usage and Technical Data

IP address

API usage logs (request time, model name, token counts, response time)

Browser type, operating system and device information

Studio and Core Modules access records

### 2.3 Payment Data

Payment provider customer ID (Waffo Pancake Customer ID)

Invoice history and balance top-up records

Sensitive payment information such as credit card numbers is processed directly by the payment provider and is not stored on the Platform's servers.

### 2.4 Cookies and Similar Technologies

The Platform uses cookies for authentication, user preferences and session management. Authentication cookies are protected with HttpOnly and Secure flags.

3. Purposes of Data Processing

The personal data collected is processed for the following purposes:

Account creation, management and authentication

Providing API services and usage tracking

Balance management, invoicing and payment tracking (payment provider integration)

Verification of activation codes and recording of balance top-ups

Detection and prevention of security breaches (IP addresses and log records)

Providing customer support and responding to requests

Analyzing Platform performance and improving service quality

4. Legal Bases

Your personal data is processed on the following legal bases:

**Contract:** Performance of services under the Terms of Use

**Explicit Consent:** Marketing communications and analytics cookies (requested separately)

**Legitimate Interest:** Security, fraud prevention, technical troubleshooting

**Legal Obligation:** Tax legislation, judicial requests and regulatory requirements

5. Sharing of Data and Third Parties

Your personal data may be shared with the following parties to the extent necessary for service provision and under appropriate security measures:

**Payment Providers (e.g. Waffo Pancake):** Your customer ID and billing information are shared for the secure processing of payment transactions.

**AI Model Providers:** Technical data required to route your API requests to the relevant model (your credentials are not shared).

**Hosting and Infrastructure Providers:** Limited access may be provided for Platform hosting, data storage and backup services.

**Legal Authorities:** In the event of a legal obligation or court order.

Your data is not sold or rented to third parties for advertising purposes.

6. Data Retention Periods

Your personal data is retained for as long as required by the purpose of collection or as necessary to fulfill our legal obligations:

Account data: As long as your account is active; 3 years after account closure

API usage logs: 12 months

Payment records: 10 years as required by tax legislation

Cookie data: Between 6 months and 2 years depending on the cookie type

Once the retention period expires, your data is securely deleted or anonymized.

7. User Rights (KVKK / GDPR)

Under KVKK and GDPR you have the following rights:

**Right to Be Informed:** To learn whether your personal data is being processed

**Right of Access:** To access your processed data and request a copy

**Right to Rectification:** To request the correction of inaccurate or incomplete data

**Right to Erasure:** To request the deletion of your data under certain conditions

**Right to Restriction of Processing:** To request that the processing of your data be restricted

**Right to Data Portability:** To receive your data in a structured, commonly used format

**Right to Object:** To object to processing based on legitimate interest

**Right to Withdraw Consent:** To withdraw your consent for consent-based processing

To exercise these rights, you can reach us at [email protected]. Your request is answered free of charge within the legal time limits.

8. Security Measures

Codex4Less implements the following technical and administrative measures to ensure the security of your personal data:

Data transfer with SSL/TLS encryption

Password storage with strong hashing algorithms such as bcrypt

Secure storage of API keys in the database

Access controls and authorization layers

Firewalls, DDoS protection and session monitoring

Regular security audits and backup procedures

However, you acknowledge that data transmission over the internet is not 100% secure and that all risks cannot be eliminated.

9. International Data Transfers

Due to infrastructure and AI model providers, the Platform may transfer your personal data to servers located outside Türkiye. In such transfers, standard contractual clauses or equivalent safeguards providing adequate protection under KVKK and GDPR are used.

10. Children's Privacy

Codex4Less is not directed to individuals under the age of 18. Individuals under 18 may not use the Platform. If we become aware that we have knowingly collected personal data from a child under 18, we delete that data immediately.

11. Policy Updates

This Privacy Policy may be updated from time to time. In the event of significant changes, we notify users through the Platform. The last updated date is shown at the top of the page.

12. Contact

For any questions, requests or complaints regarding this Privacy Policy or your personal data:

**Email:** [email protected]

**Web:** codex4less.com