KVKK Privacy Notice
This notice is provided under Article 10 of Turkish Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, to inform you about the personal data processed when you use MORATUS services.
Last updated
On this page
1. Data Controller
Your personal data is processed, in the capacity of data controller, by Muhammed Bahri Telli, owner of the sole proprietorship operating under the MORATUS brand, within the scope described below.
- Service provider
- Muhammed Bahri Telli (MORATUS)
- Business type
- Sole proprietorship
- Tax office
- Şehitkamil Vergi Dairesi Müdürlüğü (Gaziantep)
- Tax ID
- 8370487343
- Address
- FISTIKLI 152063 SK. Kaplı No: 10/30 ŞEHİTKAMİL / Gaziantep / Türkiye
- support@moratus.ai
- Web
- moratus.ai
2. Personal Data Processed, Purposes and Legal Grounds
| Data category | Purpose | Legal ground (KVKK Art. 5) |
|---|---|---|
| Identity and contact (name, surname, email) | Creating your account, providing the service, support and notices | Formation and performance of a contract (Art. 5/2-c) |
| Account and subscription (plan, credits, team memberships) | Managing subscriptions, credits and permissions | Formation and performance of a contract (Art. 5/2-c) |
| Invoice and payment transaction records | Invoicing, collection and keeping financial records | Legal obligation (Art. 5/2-ç), performance of a contract (Art. 5/2-c) |
| Content data (prompts, files, outputs, memory) | Generating AI responses and providing the workspace | Formation and performance of a contract (Art. 5/2-c) |
| Transaction security (IP address, session and security logs) | Information security, abuse prevention, records required by Law No. 5651 | Legal obligation (Art. 5/2-ç), legitimate interest (Art. 5/2-f) |
| Request and complaint records | Responding to requests, establishing and protecting rights | Establishment, exercise or protection of a right (Art. 5/2-e) |
| Marketing communication preferences | Sending commercial electronic messages | Explicit consent (Art. 5/1) |
We do not need special categories of personal data to provide the service. We recommend that you do not share such data in your prompts or files.
3. How Personal Data Is Collected
Your personal data is collected electronically: directly from you through account creation, subscription and payment steps, contact forms, email and support channels and the content you submit to the platform; automatically through cookies and session and security logs; and from third-party services through the connectors you authorize.
4. Transfers of Personal Data
Your personal data may be transferred to the following groups of recipients, limited to the purposes above and to the extent necessary:
- AI model providers and the model routing service: answering your prompts
- Hosting, content delivery network and security providers: providing and protecting the platform
- Email service providers: service emails and the contact form
- Paddle.com Market Limited (Merchant of Record): processing orders, payment, invoicing, tax and refunds
- Our accountant and competent public authorities: fulfilling legal obligations
Some of these recipients are located abroad (the European Union, the United Kingdom, the United States, Singapore and the People's Republic of China). Cross-border transfers are made under KVKK Article 9 and the related regulation, relying on appropriate safeguards (standard contracts) or the other conditions set out in the law. For details on recipients, countries and possible risks, see the Privacy Policy
5. Retention
Your personal data is kept for as long as the purpose of processing requires and for the limitation and retention periods set by law (for example, 10 years for invoices and accounting records under the Turkish Tax Procedure Law and Commercial Code). When the period ends, the data is erased, destroyed or anonymized.
6. Your Rights Under KVKK Article 11
- To learn whether your personal data is processed and, if so, to request information about it
- To learn the purpose of processing and whether the data is used in line with that purpose
- To know the third parties in Türkiye or abroad to whom the data is transferred
- To request correction if the data is incomplete or inaccurate
- To request erasure or destruction under the conditions in KVKK Article 7
- To request that corrections, erasures and destructions be notified to third parties who received the data
- To object to a result against you arising exclusively from automated analysis
- To claim compensation for damages arising from unlawful processing
7. Applications
You can send requests about your rights from the email address registered to your MORATUS account to privacy@moratus.ai, or by a signed letter to the address above. Your application is concluded free of charge within 30 days at the latest. For details of the application procedure, see the Privacy Policy
This notice is for information only and does not require your consent. Your consent is obtained separately for processing based on explicit consent (for example, marketing messages and optional cookies).