Privacy policy

This policy explains which of your data we process when you use AILens, why, where we store it and what your rights are. The service is provided by greeneyeapp (İstanbul, Türkiye).

Account data: name, email, password hash and two-step verification setting. Team data: workspace, roles and invitations.

Service data: the sites you add, audit results, the questions you track, excerpts of at most 500 characters where the brand appears in answers, reports and share links.

Billing data: invoice name, tax number and address. Our payment provider iyzico collects and stores your card details; we never see them.

Usage and security records: a log of important actions, a hashed IP address and device information.

To open your account and provide the service, to bill you, to keep things secure, to contact you about the service and to meet our legal obligations.

We send marketing emails only if you gave separate permission. We run product analytics only if you accepted analytics cookies.

When an agency adds its clients' data to AILens, the agency is the controller of that data; we process it on the agency's behalf and under its instructions. This relationship is set out in the Data Processing Agreement.

We keep your account and site data on servers in the European Union (the sub-processor list is on the security page). For visibility measurement we send question texts and public site information to AI providers in the USA; these requests carry no name, email or account identity.

The list of sub-processors we work with, with their purpose and region, is on the security page. We do not sell your data or use it for advertising.

Service data is kept for your plan's retention period: Free 90 days, Brand 12 months, Agency 24 months, Enterprise 36 months. Expired records are deleted every night.

When you delete your account you can change your mind within 30 days; after that the data is permanently deleted. It drops out of backups within 35 days at the latest. Invoices are kept for 10 years as required by law, security records for 2 years.

To access, correct, delete or export your data, use your account settings or write to us. Your rights under the Turkish Personal Data Protection Law (KVKK) are described separately in the KVKK Privacy Notice.

For requests and questions: greeneyeapp, İstanbul, Türkiye, registered email (KEP): to be added before launch. When we change this policy we update the version date and notify you by email of significant changes.

We keep your service data in the European Union: the database on Supabase (Frankfurt, Germany); job servers, backups, the report archive and sending of transactional emails (Amazon SES) on Amazon Web Services (Frankfurt, Germany); incoming support correspondence with Hetzner Online (Germany); and the web app on Amazon EC2 (Frankfurt, eu-central-1), with content delivered through the Amazon CloudFront edge network. Analyses such as answerability, sentiment and summaries run primarily on Claude models through AWS in European Union regions; we may use the OpenAI API (US) only as a fallback. For visibility measurement and brand snapshots we send the prompts you track and public site information to these providers: OpenAI, Google, Anthropic and Perplexity AI (US). For search result data we send search queries to Serper (US). These requests contain no personal data such as names, emails or account IDs, and the AI providers (OpenAI, Anthropic, Google, Perplexity AI) are configured not to use this data for model training. Limited data may also be transferred abroad for error monitoring (Sentry) and product analytics (PostHog, if you consent). On sign-up, contact and free check forms, Cloudflare Turnstile processes your IP address and browser signals for bot protection; Cloudflare's global network runs in many countries, including the US. These transfers rely on safeguards under Article 9 of the Turkish Personal Data Protection Law (KVKK), namely standard contracts.

You can undo deletion within 30 days. After that, clients, sites, reports, measurements, and team memberships are permanently deleted. Invoices are kept for the legally required period (10 years).