KVKK Disclosure

Last Updated: October 23, 2026

This Notice is provided under Turkey's Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.

1. Data Controller

The data controller is MayaListing (mayalisting.com). Contact: destek.mayalisting@gmail.com

2. Categories of Personal Data

• Identity: first and last name.
• Contact: email address.
• Customer transactions: plan, usage counts, analysis history, subscription status, support correspondence.
• Images and content: images you upload (including any personal data they contain) and the generated titles, descriptions, keywords and file names.
• Transaction security: IP address, session and sign-in records, hashed password.
• Marketing: only with your explicit consent, usage data collected through Google Analytics and Google Ads cookies.

We do not process your card details; payments are taken by Lemon Squeezy.

3. Purposes and Legal Grounds

• Creating your account, providing the service (image analysis and metadata generation), keeping your history, managing your subscription and usage limits: necessary for entering into and performing a contract (KVKK Art. 5/2-c).
• Keeping invoice and accounting records and answering requests of competent authorities: compliance with a legal obligation (Art. 5/2-ç).
• Information security, preventing abuse and overload (including IP-based daily limits), answering support requests and improving the service: legitimate interest (Art. 5/2-f).
• Measuring site usage and ad effectiveness (Google Analytics / Google Ads): explicit consent (Art. 5/1). You give it in the cookie notice and can withdraw it at any time with "Cookie Preferences".

4. How Data Is Collected

Through sign-up and sign-in forms, Google sign-in, image uploads, your actions in the app, subscription notifications from the payment provider, support emails and cookies, electronically and by partly or fully automated means.

5. Transfers and International Transfers

For the purposes above only, data is transferred to these suppliers: Supabase (database, authentication and image storage; servers in the European Union), Vercel (hosting), Google (Gemini AI analysis, Google sign-in, email; Analytics and Ads only with your explicit consent) and Lemon Squeezy (payments and subscriptions). These suppliers may process data outside Turkey, in the European Union and the United States; international transfers follow the procedures and safeguards of Article 9 of the KVKK. Data may also be disclosed to competent public authorities on request, as required by law.

6. Retention

Personal data is kept as long as the purpose requires and as required by law: account, history and images until you delete them or your account; IP-based daily counters for at most 30 days; invoice and payment records for the period required by tax law. Afterwards the data is deleted, destroyed or anonymized.

7. Your Rights under Article 11 of the KVKK

By applying to the data controller, you can:

• Learn whether your personal data is processed,
• Request information about it if it is,
• Learn the purpose of processing and whether it is used accordingly,
• Know the third parties in Turkey or abroad to whom it is transferred,
• Request correction if it is incomplete or inaccurate,
• Request deletion or destruction under the conditions of Article 7 of the KVKK,
• Request that corrections, deletions or destructions be notified to third parties to whom the data was transferred,
• Object to a result against you that arises from analysis exclusively by automated systems,
• Claim compensation for damage caused by unlawful processing.

8. How to Apply

Send your request in writing from the email address registered on the Platform to destek.mayalisting@gmail.com, in line with the Communiqué on the Procedures and Principles of Applications to the Data Controller. Include your name, contact details and the subject of your request. Requests are answered free of charge within thirty days at the latest. You can also delete your account and data directly with "Delete Account" on the Account page.