Privacy policy

• Account: your email address, password (stored only as a hash by our sign-in provider), workspace name, the members of your workspace and their roles.
• Content you add or create: brands and their website addresses, the brand memory, example texts, projects and seed keywords, topics, briefs, articles, images, your feedback and instructions, and earlier versions of all of these.
• Website scans: when you add a brand, our crawler reads public pages of that website (see how KezAIStudioBot works). If the site blocks it, we may list the site's page addresses from a search index instead; no page content is fetched that way.
• Client review links: when you share a draft, the person you send it to can leave comments under a name they type. We keep the comments, that name, and a one-way hash of their IP address to limit abuse.
• Publishing: if you connect a WordPress site, its address, the user name and an application password. The password is stored encrypted in a secrets vault and is only read when you send a draft.
• Credits and payments: your credit balance and every credit movement. When purchases are on, Paddle (our reseller) handles payment details; we never see your card.
• Technical data: a one-way hash of your IP address and a normalised email address when you claim free trial credits (to prevent repeat claims), records of each generation step (model, tokens, cost) and server logs.

• To provide the service you signed up for: running scans and generations, storing your work, sending your drafts where you ask (contract).
• To keep the service secure and fair: rate limits, trial abuse checks, error logs (legitimate interest).
• To send account emails (confirm your address, reset your password) and notifications about your work, such as a client's decision on a review link (contract).
• To meet legal duties such as tax records once purchases are on (legal obligation).

We don't sell personal data, show ads or use your content to train AI models.

To write topics, briefs and articles, we send the relevant inputs (your brand memory, examples, instructions, search data and earlier drafts) to Anthropic's Claude models through OpenRouter. Every request asks for zero data retention, so the providers don't store or train on it. To create images we send OpenAI a short description of the picture (topic and style); OpenAI doesn't train on API data and may keep requests for up to 30 days for abuse monitoring.

AI output can be wrong. KezAI Studio flags claims it can't match to your brand's information, but you review every text before you publish it.

These companies process data on our behalf, only for the purposes above:

If you connect a WordPress site, we send drafts to that site. That site and its host are yours, not our processors.

Several of the companies above are outside Türkiye, most in the USA. We transfer data to them only to provide the service, under the safeguards the law requires (for KVKK, standard contracts notified to the Personal Data Protection Authority; for GDPR, the EU Standard Contractual Clauses or the EU-US Data Privacy Framework). Ask us for details at the address below.

• Your account and content: while your account is open. Earlier versions of your content are kept with it.
• Image files of deleted brands or content: removed from storage within a few days.
• Records of failed content workflows: 14 days. Database backups: 7 days.
• Credit movements and payment records: as long as tax and accounting law requires, even after an account closes.
• Client review comments: with the content they belong to.

We use only the cookies the service needs: your sign-in session and your light or dark theme choice. There are no analytics or advertising cookies. When purchases are on, Paddle's checkout sets its own cookies during payment.

You can ask whether we process your personal data, get a copy, have it corrected or deleted, learn who we share it with, object to processing, and claim compensation if unlawful processing harmed you (KVKK Article 11; GDPR Articles 15-22). Write to support@kezaiautomation.com; we answer within 30 days. You can also complain to the Personal Data Protection Authority (KVKK) or, in the EU, to your data protection authority.

If you are a client who left comments on a review link, you can ask the agency that shared it, or us.

Data is encrypted in transit and at rest. Access inside the database is limited by workspace, our content workflows can only touch the job they were given, and WordPress passwords sit in a separate encrypted vault.

KezAI Studio is for business use and not for anyone under 18. If we change this policy we update the date above, and tell you by email when the change is material. Questions: support@kezaiautomation.com.