Skip to legal content
Recallora Back to home
Recallora · Legal

Privacy notice

1. Data we process

We process account and security information; a country-level estimate used to choose the initial interface and content-language defaults; verified business context; product, service and brand-reference records; instructions, plans, content revisions, media assets, approvals, reminders and owner-reported results; optional profile handles used to open the intended platform; and subscription, credit, payment-status and legal-acceptance records. We do not receive or store full card details. The raw IP used for the country estimate is not written to your product profile or brand memory.

2. AI, payment and social providers

Only context needed for the requested task is sent to the configured AI provider. Google Gemini may generate images and Google Veo may generate video. iyzico processes checkout, card validation, subscription and payment information under its own security and privacy obligations. Recallora does not send content to social-platform publishing APIs in the current service mode.

3. Purposes and legal grounds

Data is used to create and secure the account, provide requested content and publishing workflows, perform and evidence the contract, process payments and refunds, prevent abuse, keep accounting and transaction records, meet legal duties, and respond to rights requests. Consent is requested separately where contract, legitimate interest, or a legal obligation is not an appropriate basis.

4. Transfers and subprocessors

Payment data is shared with iyzico; requested AI context with the configured AI provider; the request IP may be processed transiently by the configured country-estimation provider solely to return a country code; share-package data stays in Recallora until you use your device to share it; and operational data with hosting, storage, and email providers. Some providers may process data outside Türkiye. Applicable transfer safeguards and any required consent are used before such processing is enabled.

5. Retention and security

Data is retained only for the service, security, accounting, chargeback, and statutory periods that apply. Sessions use secure HTTP-only cookies, tenant data is separated by workspace, provider secrets are server-side, and critical actions use immutable records and idempotency controls. No internet service can promise absolute security.

6. Your choices and rights

You may request access, correction, export, deletion, restriction or objection as applicable, withdraw consent without affecting earlier lawful processing, and complain to the competent authority. Send requests from your registered email address to support@recallora.com. Creating a request does not automatically remove data; it places the request into manual review so identity and mandatory retention duties can be verified before deletion.

7. Cookies

Strictly necessary cookies keep your session secure, remember interface and country-level language defaults, and protect checkout state. Non-essential analytics or advertising cookies are not enabled without the consent required by applicable law.