Data Protection Notice (KVKK)

The Renderhane platform serves as the data controller. Contact: info@renderhane.com

The following personal data is processed through our platform: • Identity information: Name, surname • Contact information: Email address • Account information: Google account ID, profile photo • Transaction information: Uploaded images, AI processing results, credit usage history • Payment information: Payment history (credit card details are processed by Iyzico) • Technical data: IP address, browser and device information, cookie data

Your personal data is processed for the following purposes and legal bases: • Performance of contract: Service delivery, account management, payment processing • Legitimate interest: Improving service quality, security measures, statistical analysis • Legal obligation: Tax legislation, regulatory notifications • Explicit consent: Marketing communications (if applicable)

Your personal data may be transferred to the following parties for service delivery: • Supabase Inc. (USA) — Database and authentication services • Cloudflare Inc. (USA) — Content delivery and file storage • fal.ai (USA) — AI model processing services • Google LLC (USA) — OAuth authentication • Iyzico (Turkey) — Payment infrastructure Cross-border data transfers are carried out with adequate protection under KVKK Article 9.

• Account information: As long as the account is active • Transaction history: Until account deletion • Uploaded images and outputs: Until account deletion • Payment records: 10 years as required by law • Technical logs: 6 months

Under Article 11 of KVKK, you have the following rights: a) Learn whether your personal data is being processed b) Request information if your personal data has been processed c) Learn the purpose of processing and whether data is used accordingly d) Know the third parties to whom your personal data has been transferred domestically or abroad e) Request correction of incomplete or inaccurate personal data f) Request deletion or destruction of personal data under KVKK Art. 7 g) Request notification of correction and deletion operations to third parties h) Object to results arising from automated analysis of processed data i) Claim compensation for damages caused by unlawful processing of personal data

To exercise the rights listed above, you may apply through the following methods: • Email: Send your application with identity verification documents to info@renderhane.com. Applications will be concluded free of charge within 30 days at the latest. If the process requires additional costs, fees may be charged according to the tariff determined by the Personal Data Protection Board.