गोपनीयता नीति

1. डेटा नियंत्रक

Acting as the data controller, Morfoz Ltd. is registered at 128 City Road, London EC1V 2NX, United Kingdom (Companies House No. 14728392). For data processed by the Istanbul branch, the local data controller is Morfoz Yazılım ve Bilişim Hizmetleri Ltd. Şti.

2. हम जो डेटा एकत्र करते हैं

The following personal data may be processed when you use the Service:

• खाता जानकारी: First name, last name, email address, password hash, billing address.
• सहायक/क्लोन प्रशिक्षण डेटा: Text you upload, voice samples, images, product information, and other content.
• वार्तालाप डेटा: Records of your assistants' conversations with end users (for quality and training).
• उपयोग डेटा: IP address, browser type, session duration, clickstream, cookie information.
• भुगतान डेटा: We do not store card details; our payment service provider (Stripe) tokenizes and processes them.

3. Purposes and कानूनी Basis for Processing

We process your data only for the following purposes, based on a valid legal ground:

• अनुबंध प्रदर्शन: Service provision, account management, billing.
• वैध हित: Service quality improvement, fraud prevention, security.
• स्पष्ट सहमति: Marketing communications, cookies (other than necessary), optional analytics.
• कानूनी obligation: Tax, accounting, response to legal requests.

4. डेटा प्रतिधारण

We retain your account data until you delete your account. After a deletion request, all personal data is permanently deleted within 30 days; backups are cleared within 90 days at the latest. Data we are required to retain by law (e.g., invoices, tax records) is kept for the period specified in the relevant law.

5. डेटा साझाकरण

We do not sell your data. We share it with third parties only in the following cases:

• हमारे प्रोसेसर: Cloud infrastructure providers (AWS, Cloudflare), payment processor (Stripe), email service (Postmark) — all under GDPR-compliant contracts.
• कानूनी talepler: When required by a valid court order or legal obligation.
• हस्तांतरण/विलय: In case of company transfer or merger, to the new owner (with 30 days prior notice to you).

6. अंतर्राष्ट्रीय डेटा स्थानांतरण

Morfoz infrastructure is hosted in the European Union (Frankfurt) and the United Kingdom (London) regions. Data collected from Turkey is transferred under explicit consent and standard contractual clauses. Required safeguards for cross-border data transfer are provided in accordance with Article 9 of KVKK.

7. आपके अधिकार

You have the following rights under GDPR and KVKK:

• Access your personal data and obtain a copy
• Request correction of inaccurate data
• Request erasure of your data ("right to be forgotten")
• Restrict processing or object to it
• Port your data in a machine-readable format
• Withdraw your consent (without retroactive effect)

To exercise these rights, write to support@aigap.com. We respond within 30 days.

8. कुकीज़

Our site uses only necessary cookies for session management and (with consent) anonymous analytics cookies. We do not place advertising cookies. You can update your cookie preferences at any time from your browser or the cookie panel on the site.

9. सुरक्षा

Data is encrypted with TLS 1.3 in transit and AES-256 at rest. Access is bound to strict role-based permissions and audited. We are in the SOC 2 Type II preparation process. In case of suspected breach, we notify the relevant authority and affected users within 72 hours.

10. बच्चों का डेटा

The Service is not intended for individuals under 16. We do not knowingly collect data from a child under 16.

11. नीति परिवर्तन

We may update this policy from time to time. Material changes will be notified at least 30 days in advance via email and on the site.

12. शिकायतें

If you are not satisfied with our data processing, you may file a complaint with the UK ICO (ico.org.uk) or, in Turkey, with the KVKK Authority (kvkk.gov.tr).