Personal Data Protection — Privacy Notice

1. Data controller

Data controller: Gece (gece.ai). Address: The address will be added once company formation is complete; contact: [email protected]. Contact: [email protected]

2. Personal data processed

Account data (email address, an irreversible hash of your password, account settings); transaction security data (IP address, browser information, sign-in and key operation logs); the credit wallet link identifier (your Telegram user number, if you link it) and credit transaction records; the information you submit via contact and newsletter forms. Your uploaded photographs, audio and text, chat messages, generated content, and the Telegram identity of bot or mini app users are also processed.

3. Purposes and legal grounds

Your data is processed for the establishment and performance of the membership agreement (operating the account, carrying credits across products, completing purchases), for compliance with legal obligations, for service security under legitimate interest (preventing abuse and unauthorized access), and — subject to your explicit consent — for sending the newsletter.

4. Transfers

Your data is not sold and not shared for advertising. It may be shared only to the extent the service requires with hosting, email delivery, content delivery and payment service providers, limited to running the relevant service. Some of these providers may be located abroad; transfers are made with the safeguards required by law. Card payments on the web are processed by Dodo Payments; payments in Telegram are made with Telegram Stars.

Transfer abroad

Your uploaded content and prompts are transferred to the AI infrastructure provider abroad, WaveSpeed AI and its model providers, to perform generation. This transfer relies on your explicit consent obtained at registration under Article 9 of Turkey's KVKK. You may withdraw consent by writing to [email protected]; if you do, the generation feature will no longer be available to you.

5. Retention

Account data is kept for the duration of your membership and transaction security logs for reasonable, legally compliant periods. When you request deletion of your account, your data is deleted or anonymized, subject to statutory retention obligations.

6. Your rights (KVKK art. 11)

You have the right to learn whether your data is processed, to request information, to learn the purpose of processing, to know the parties it is transferred to, to request correction if incomplete or inaccurate, to request deletion or destruction, to object to a result produced against you through analysis by automated systems, and to claim compensation if you suffer damage.

7. Applications

You may submit requests regarding your rights to [email protected] or via the contact form. Applications are concluded free of charge within 30 days at the latest. This notice is updated when necessary; the current version is always published on this page.

Last updated: 2026-10-14