KVKK Disclosure Text

1. Identity of the Data Controller

Data Controller: Eksen.

Contact: info@eksen.tech

2. Purposes of Personal Data Processing

Your personal data is processed for the following purposes: creating platform membership and account management; providing AI-powered legal tools; improving service quality and providing technical support; managing the credit / usage quota within the pilot; pilot evaluation, collecting feedback and improving the product; fulfillment of legal obligations (KVKK and related legislation); and security, fraud prevention and protection of platform integrity.

3. Categories of Personal Data Processed

The following categories are processed during pilot registration and use.

Identity data: first name, last name.

Contact data: email address.

Professional and corporate data: company / office name; profession-role information (lawyer, legal counsel, intern, corporate user, academic, student, or the other role you specify).

Transaction security data: encrypted password, session information, record of disclosure consent.

Usage data: credit / tool usage history, transaction records.

Feedback data: survey responses, satisfaction rating and free-text comments (only if you share them).

Processing history: end-to-end encrypted tool input/output history (content decryptable only with your password) and masked titles.

Technical data: IP address, browser information, login records.

4. Documents Under the Anonymization Engine

Documents and texts you enter are passed through the anonymization engine at your request, aiming to strip personal data before they are transmitted to the AI. Since the engine can make mistakes, reviewing before sending is recommended; the final decision rests with the user.

Document contents are not permanently stored in Eksen systems; they are held within the session scope after processing and deleted when the session ends.

5. Legal Basis

Your personal data is processed under the following legal bases (KVKK Article 5): Article 5/2(c), directly related to the conclusion or performance of a contract; Article 5/2(ç), for the data controller to fulfill its legal obligation; Article 5/2(e), necessary for the establishment, use or protection of a right; and Article 5/2(f), legitimate interest, provided it does not harm fundamental rights and freedoms.

6. Transfer of Personal Data

Your personal data is not transferred to domestic or foreign third parties except in the following cases: legal obligation or request from an authorized institution/court; and technical service providers used for platform infrastructure (as data processors, only within the scope of service provision).

Regarding document contents: to generate AI outputs, only masked text that has passed through the anonymization engine reaches the third-party AI provider abroad; the architecture is designed so that raw personal data never reaches this provider, and under the provider's API terms the transmitted text is not used for model training.

7. Data Retention Periods

This is a pilot application. All collected data is kept only for the duration of the pilot; it is deleted when the pilot ends and the system is shut down within 30 days at the latest.

Document contents are deleted at the end of the session and are not stored. Account and usage data is deleted when the pilot ends.

8. Rights of the Data Subject (KVKK Article 11)

You have the following rights over your personal data: learn whether it is processed; request information if processed; learn the purpose of processing; learn third parties to whom data is transferred; request correction, deletion, or destruction; object to automated processing; and request compensation for damages.

You can exercise your rights by contacting us at info@eksen.tech.

9. Application Method

You can submit your applications to info@eksen.tech. Applications are concluded within 30 days at the latest; responses are free of charge.

10. Complaint to the Personal Data Protection Authority

If your application is rejected or you are not satisfied with the response, you may file a complaint with the Personal Data Protection Authority: www.kvkk.gov.tr

11. Cookie Policy

Our platform uses two categories of cookies.

Essential cookies: required for session management, security and the platform's core functionality; always active and cannot be disabled.

Analytics cookies: help us improve the product by measuring usage statistics such as daily active users, funnel steps and session duration. These are only enabled with your explicit consent (opt-in); no analytics cookies or data are collected until you consent.

Data collected for analytics purposes is not shared with or transferred to third parties; it is kept solely within Eksen systems. Analytics event records are retained for at most 12 months, and the consent cookie that remembers your preference for at most 1 year.

You can change or withdraw your consent at any time via the “Cookie Preferences” link in the footer.