Privacy Policy

Last updated: April 25, 2026

At Astropond, we respect your privacy. This policy explains what data we collect, why we collect it, and how we protect it.

1. Data we collect

1.1 Account information

• Email address (required)
• Name (optional)
• Password (stored only as a salted hash — never plaintext)
• Account creation date and last login time

1.2 Chat data

• Messages you send to AI models and the responses
• Files you upload (if any)
• Conversation titles and history

1.3 Voice data

• Microphone audio when you use the voice call feature
• These recordings are not stored on our servers — they are streamed in real-time to xAI's Grok realtime API and discarded after transmission.

1.4 Payment information

• Astropond does not see or store credit card numbers. All payment processing is handled by Stripe Inc.
• We only retain transaction history (date, amount, status).

1.5 Automatically collected data

• Device type and operating system (from User-Agent header)
• IP address (for security and country-based language detection)
• Error logs and performance data

2. How we use your data

• To provide the service: chat, voice calls, file analysis.
• To manage your account: login, balance, history.
• For billing: measuring usage and deducting from your balance.
• For security: detecting abuse, fraud, and exploitation.
• For communication: important account notifications and service updates.

We do not use your data for advertising, sell it, or share it with third-party advertisers.

3. Third-party service providers

• OpenAI (GPT models) — your chat messages. Policy
• Anthropic (Claude models). Policy
• Google (Gemini models). Policy
• xAI (Grok and realtime voice). Policy
• Stripe Inc. (payment processor). Policy

These providers use your data only to deliver the service to you, not for their own advertising or marketing purposes.

4. Data retention

• Account data: retained until you delete your account.
• Chat history: retained as long as you keep it; you can delete any conversation at any time.
• Voice recordings: not stored — processed in real-time only.
• Payment records: retained for 10 years per Turkish tax law.
• Error logs: automatically deleted after 90 days.

5. Your rights (KVKK / GDPR)

Under Turkey's Personal Data Protection Law (KVKK) and the EU GDPR, you have:

• Right to access your data
• Right to correct your data
• Right to delete your data ("right to be forgotten")
• Right to restrict processing
• Right to export your data in a portable format
• Right to object to processing

To exercise these rights: write to privacy@bizimzeka.com or use "Delete Account" in your account settings.

6. Children's privacy

Astropond is for users 18 and over. If we discover we have collected data from someone under 18, we delete the account immediately. Contact privacy@bizimzeka.com.

7. Data security

• All data traffic is encrypted with TLS 1.3.
• Passwords are hashed with bcrypt.
• Database access is restricted to authorized personnel.
• Regular security audits are performed.

8. Cookies

Astropond uses only functional cookies:

• Session cookie (for login)
• Language preference
• Theme preference (light/dark)

We do not use advertising or tracking cookies.

9. Changes to this policy

When this policy is updated, the "Last updated" date will change and significant changes will be notified to registered users by email.

10. Contact

• Email: privacy@bizimzeka.com
• General support: support@bizimzeka.com