Effective date: August 2026
ChatBBot ("we", "our", "us") treats your privacy as something worth protecting. This Privacy Policy sets out the ways in which your personal information is gathered and handled by ChatBBot.
It describes how we collect, use, retain and disclose your personal data when you use our website, any subdomain of it, and our mobile and web application, which together are referred to as the "Service". Using or accessing the Service confirms that you have read this Privacy Policy and understood it.
Where the law requires it, we will ask for your explicit consent before we collect or process your personal data.
Company (also "we", "us", "our"): IKA Studios Yazilim Limited Sirketi.
Cookie: A small file that your browser stores on your device as you move around a website. Cookies serve a range of functions, among them recognising your browser, supporting analytics, retaining choices such as language or sign-in state, and generally improving how the service feels to use.
Country: The jurisdiction from which ChatBBot operates, namely Turkey.
Customer: Any person, business or other organisation that registers for or subscribes to the ChatBBot Service, whether for private or commercial reasons.
Device: Any hardware capable of reaching the Service over the internet, including phones, tablets, computers and comparable equipment.
IP Address: The numeric identifier allocated to each device on the internet, which can in some cases indicate roughly where that device is located.
Personal Data: Information relating to a natural person who is identified or who can be identified, for instance a name, an email address or an IP address.
Personnel: People engaged by the Company as employees or under contract to carry out work on its behalf.
Service: The features, products, applications and services offered by ChatBBot, reachable through the website and the mobile application among other channels.
Third-Party Service Providers: Outside organisations, including analytics vendors, advertisers and marketing partners, that help us deliver, promote or improve the Service, and with which personal data may be shared as set out in this Policy.
Website: The official ChatBBot site at chatbbot.com.
You: The data subject who uses or accesses the Service, on their own behalf or on behalf of an organisation, and whose personal data is handled under this Privacy Policy.
Each processing activity rests on a specific lawful basis. Depending on the activity, that basis may be the performance of a contract, compliance with a legal duty, your consent, or a legitimate interest of ours. The categories of data involved and the way each is handled are set out below.
Choosing "Sign in with Google" causes us to request the basic profile information held on your Google account. What reaches us is limited to:
That information is used only to open and administer your ChatBBot account, to confirm who you are, and to contact you about the account. Nothing else held in your Google account is touched: not your contacts, not your calendar, not your Drive files, not data from any other Google product. Your Google credentials are managed securely by Clerk, the authentication provider we rely on, and are never held directly by ChatBBot.
Access granted to ChatBBot can be revoked by you at any time from the permissions page of your Google account.
Identity and Contact Details
What we hold: the name on the Google or Apple account you signed in with, and your email address.
Why: to contact you, run your account, handle support requests and answer enquiries.
Lawful basis: performance of a contract.
Technical and Security Data
What we hold: IP address, device name, browser type and version, operating system, times of access, pages viewed, referring URLs and configuration data.
Why: to keep the Service secure and operational, to prevent fraud, and to support debugging, diagnostics and system analytics.
Lawful basis: legitimate interest, and legal obligation where logs are concerned.
Usage and Log Data
What we hold: application usage logs, session data, page interactions, crash reports and download errors.
Why: to improve the Service, to debug it, to monitor performance and to run internal analytics.
Lawful basis: legitimate interest, and legal obligation where logs are concerned.
Purchase and Order Data
What we hold: purchase history, subscription and order records, and in-app transaction data.
Why: to process purchases and subscriptions and to administer billing and payment records.
Lawful basis: performance of a contract, and legal obligation in respect of billing.
Marketing and Analytics Data
What we hold: cookies, analytics data, stated preferences, and your engagement with marketing emails or advertisements.
Why: personalised advertising, direct marketing and measurement of campaign performance.
Lawful basis: legitimate interest, and consent for any cookie that is not strictly necessary.
We may gather the data described above directly from you, whether by electronic or physical means, from your mobile device, or from third-party platforms through which our application can be reached, such as the Apple App Store and the Google Play Store. The reasons for doing so are to meet legal obligations, to improve our services, to administer your use of them, and to make those services enjoyable and easy to navigate.
Your information supports a number of service and business purposes: delivering the Service, running it administratively, and marketing our products and services. Each data category above indicates which apply. In more detail:
We use your information to meet our contractual obligations to you, which includes:
(a) responding to your messages and search queries and providing comparable functionality; (b) maintaining your account and the information in it; (c) opening up particular areas, functions and features of the Service to you; (d) dealing with customer and technical support requests; (e) writing to you about your account, your activity on the Service, and changes to our policies; and (f) processing your payment details and other payment methods for anything you buy.
Administrative uses of your information include:
(a) pursuing legitimate interests such as network and information security and fraud prevention; (b) identifying security incidents, guarding against deceptive, malicious, fraudulent or unlawful activity, and pursuing those responsible; (c) gauging interest and engagement across the Service; (d) short-lived uses such as contextual customisation of advertising; (e) improving, upgrading and enhancing the Service; (f) building new features and services; (g) maintaining internal quality control and safety; (h) authenticating identity; (i) debugging and repairing faults in the Service; (j) auditing interactions, transactions and other compliance matters; (k) enforcing our policies and agreements; and (l) meeting our legal obligations.
Personal information may be used to shape the content and advertising you see. We will provide such material only where the law permits it. Channels may include email campaigns, custom audience advertising, and, where you have given explicit consent, interest-based or personalised advertising.
Your information may be disclosed to third parties for several business reasons: to deliver the Service, to protect ourselves or others, or in connection with a significant corporate transaction such as a merger, sale or transfer of assets. The recipients fall into the categories below.
(a) Service Providers. We share personal information with providers who use it to help us run the Service, covering IT support, hosting, payment processing, customer service and cloud infrastructure. These include cloud providers (Google, CloudFlare), analytics providers (Facebook, Google Analytics, Appsflyer, PostHog) and payment processing providers (Zotlo).
(b) Business and Communication Partners. Where you have asked for a product or service, we may share personal information with partners in order to supply it. We may also share it with partners alongside whom we offer products or services jointly.
(c) Advertising and Analytics Partners. Personal information may be shared with third-party advertising partners. Those partners may place technologies and tracking tools within the Service to gather information about your activity and your device, such as IP address, cookie identifiers, pages visited, location and time of day. They may combine that with similar information gathered elsewhere in order to serve you personalised advertisements across properties in their networks, a practice commonly called interest-based or personalised advertising. Measurement partners in this category include PostHog, Google Analytics, Google Tag Manager, Clarity and Cookie-Script.
(d) APIs and SDKs. Third-party application programming interfaces and software development kits may form part of how the Service works. Our support team can provide further detail on request.
(e) Authorities and Law Enforcement. We may access, preserve and disclose information we hold about you to external parties where we believe in good faith that doing so is required or appropriate in order to: respond to law enforcement or national security requests and to legal process such as a subpoena or court order; protect the rights, property or safety of you, of us or of others; enforce our contracts or policies; recover amounts owed to us; or support an investigation or prosecution relating to suspected or actual unlawful activity.
Personal information described in this Policy may be kept for as long as you continue to use the Service, or for as long as is needed to achieve the purposes it was collected for. Those purposes include delivering the Service, settling disputes, establishing legal defences, carrying out audits, pursuing legitimate business aims, enforcing our agreements and complying with the law.
IKA Studios Yazilim Limited Sirketi acts as data controller and processes personal data in line with the following principles: (i) lawfulness and good faith; (ii) accuracy and, where necessary, currency; (iii) collection for specified, explicit and legitimate purposes; (iv) limitation to the purpose of processing, together with data minimisation; and (v) storage only for the period set by relevant legislation or required by the purpose of processing.
Your personal data will be processed by automated or non-automated means for the purposes stated in this Policy, in line with applicable legislation, where the law expressly permits it, where a contract is being formed or performed or the processing relates directly to that, and where IKA Studios Yazilim Limited Sirketi has a legitimate interest, provided always that your fundamental rights and freedoms are safeguarded.
IKA Studios Yazilim Limited Sirketi retains the personal data it processes in line with relevant legislation, for the periods that legislation sets or that the purpose of processing requires. IKA Studios Yazilim Limited Sirketi commits to putting in place every necessary technical and administrative measure, and to exercising due care, so that personal data remains confidential, intact and secure. The measures taken are aimed at preventing unlawful processing, unauthorised access, and the unlawful disclosure, alteration or destruction of data. In practice this includes:
Anti-virus software. Every computer and server in the IKA Studios Yazilim Limited Sirketi technology estate runs anti-virus software that is updated on a regular cycle.
Firewalls. The data centre and disaster recovery centres that host IKA Studios Yazilim Limited Sirketi servers sit behind regularly updated software firewalls. These next generation firewalls govern all staff internet connections and screen that traffic for viruses and comparable threats.
VPN access. Suppliers reach IKA Studios Yazilim Limited Sirketi servers and systems only through SSL-VPN configured on those firewalls. Each supplier holds its own SSL-VPN identity, which grants access solely to the systems that supplier is authorised to use.
Access rights. Employee authorisation across IKA Studios Yazilim Limited Sirketi systems is confined to what each job description requires. Where duties or authority change, system permissions are updated accordingly.
Security and risk monitoring. Events occurring on IKA Studios Yazilim Limited Sirketi servers and firewalls are fed into an information security and risk management system, which allows issues to be identified and acted on immediately.
Logging. Every transaction record involving sensitive data is logged securely.
Training. Employees receive training at regular intervals, so that awareness of information security breaches and data incidents stays high and the human contribution to such incidents is minimised.
Physical security. Personal data held on paper is stored in locked cabinets reachable only by authorised staff. Physical security measures are matched to the sensitivity of what is stored in each environment.
Backups. IKA Studios Yazilim Limited Sirketi backs up stored data on a regular cycle, using the facilities provided by its cloud infrastructure providers and, where judged necessary, backup solutions of its own, in each case consistent with relevant legislation and with this Policy.
Confidentiality agreements. Employees involved in processing sensitive personal data are placed under non-disclosure agreements.
Personal data may be transferred to the third parties identified above. When that happens, appropriate security measures are applied so that the data stays protected during and after the transfer. Where data goes to an external provider or processor, we put contractual arrangements in place obliging them to process it in line with applicable data protection law and with our instructions.
We reserve the right to pass information to a third party where ChatBBot, or any of its corporate affiliates, sells, merges or otherwise transfers all or substantially all of its assets, or the part of the business to which the Service relates. The same applies if we cease trading or if a petition in bankruptcy, reorganisation or a comparable proceeding is filed by or against us. In every such case the receiving party must agree to abide by this Privacy Policy.
This Privacy Policy covers the Services alone. Links to sites we neither operate nor control may appear within the Services. We do not vet those sites for accuracy or completeness, we do not monitor them, and we are not answerable for their content or for the views expressed on them. Once you follow a link away from the Services, this Privacy Policy ceases to apply. What you do on any other site, including sites we link to, falls under that site's own policies. Those operators may run their own cookies or use other techniques to gather information about you.
ChatBBot uses cookies to understand how visitors interact with the website and to make it perform and function better. Cookies are small data files that your browser saves onto your device.
Several kinds are in use. Strictly necessary cookies keep the website working, for example by remembering that you are signed in. Non-essential cookies support added functionality or performance, for example remembering preferences or enabling video playback. Non-essential cookies are set only once you have given explicit consent through our cookie management tool. That tool lets you review the categories in use and withdraw consent at any point, including after you have given it.
Most browsers additionally allow cookies to be controlled or disabled through their own settings, which you will find in the browser menu. Bear in mind that disabling cookies can affect how the website performs and may make some features unavailable.
We neither access, collect nor store card details or other payment credentials. All payment transactions are handled securely by payment service providers. If you want your payment information managed or deleted, please approach the relevant platform (Zotlo) directly.
The Service is not directed at anyone under 13, and we do not knowingly gather personally identifiable information from anyone in that age group. Parents and guardians who become aware that their child has given us personal data should contact us. Where we discover that personal data has been collected from a child under 13 without verified parental consent, we act to remove that information from our servers.
ChatBBot works through the official APIs of third-party AI model providers. We are not connected to those providers in any other way. ChatBBot has no affiliation with any government or political body. Information produced within ChatBBot is offered for general information only and should not be treated as official or authoritative. Our Terms of Use cover the use of AI and AI models in more detail.
As our Service and our policies develop, this Privacy Policy may need to change so that it continues to describe them correctly. Unless the law requires otherwise, we will tell you before changes take effect, for example through the Service, and give you a chance to read them. Continued use after that point binds you to the updated Policy. If you would rather not accept it, you are free to stop using the Service and delete your account.
This section explains how and under what conditions a ChatBBot account can be deleted. We offer deletion in order to respect your data privacy rights, including the right to erasure under the GDPR. Deleting an account means accepting the conditions set out here.
Sign in. Deletion can only be started from a signed-in account.
Open Account Settings. Go to the Account Settings area of the website.
Choose Delete Account. Select the Delete Account option.
Enter the confirmation code. A unique confirmation number is generated, which you then type into the field provided.
Confirm. Press the confirm button in the deletion dialog.
Immediate effect. Once confirmed, the account and all data attached to it are permanently erased and cannot be recovered.
Backups. Because of routine backup processes, some data may persist in backup storage for a limited period. It is inaccessible during that period and is ultimately erased in line with our retention policy.
Anonymised data. Data that can be anonymised, such that it no longer identifies you, may be kept for analytical purposes.
Loss of access. You lose the account together with any services or content tied to it.
Subscriptions end. Active subscriptions terminate and no refund follows.
No reversal. Deletion cannot be undone. Once an account is gone it cannot be restored.
Legal requirements. Deletion requests are honoured except where the law requires us to retain particular information.
Outstanding transactions. Deletion may be held up where transactions are unresolved or legal obligations are outstanding. Any data kept in that situation is limited to what those legal or contractual requirements demand.
Questions about deletion, or help with the process, can be directed to our support team at support@chatbbot.com
We may revise this section at any time. Significant changes will be communicated through the website or by email.
If you are located in the European Economic Area, we may collect and use information about you. This section sets out exactly what is collected, why, and how it is kept safe from misuse or unauthorised copying.
GDPR is an EU-wide data protection and privacy law. It governs how companies must protect the data of EU residents and strengthens the control those residents have over their own personal data.
It applies to any company operating internationally, not only to EU-based businesses and EU residents. Our customers' data matters to us wherever they happen to live, and for that reason we have adopted GDPR controls as the baseline standard across everything we do.
Any data relating to an individual who is identified or identifiable. GDPR covers a wide range of information, whether it identifies someone on its own or does so when combined with other information. Personal data goes well beyond a name or an email address. It can include financial information, political opinions, genetic and biometric data, IP addresses, physical addresses, sexual orientation and ethnicity.
The data protection principles require, among other things, that:
GDPR introduces additional requirements covering how companies safeguard the personal data they collect and process. It also raises the cost of non-compliance through stronger enforcement and larger fines. Beyond that, it is simply the right approach. At ChatBBot we regard your data privacy as important, and our existing security and privacy practices already go further than this regulation demands.
GDPR gives you a set of rights over your personal data, designed to put you in control of how it is collected, processed and used. To exercise any of them, or to ask a question, write to support@chatbbot.com stating which right you wish to rely on:
Access. Ask us to confirm whether we process your personal data and, if so, to supply a copy along with the relevant details.
Rectification. Ask us to correct personal data that is inaccurate or incomplete.
Erasure. Ask us to delete your data, subject to certain conditions.
Restriction. Ask us to limit how your personal data is processed in defined circumstances.
Portability. Ask for your personal data in a structured, commonly used, machine-readable format, and ask us to send it to another controller.
Objection. Object to processing that rests on our legitimate interests, or to processing for direct marketing.
Withdrawal of consent. Where processing rests on consent, withdraw it at any time, without affecting processing already lawfully carried out.
Complaint. Lodge a complaint if you believe your data rights have been breached.
Under the California Consumer Privacy Act (CCPA) we must set out the categories of personal information we collect and how they are used, the categories of source they come from, and the third parties they are shared with. All of that appears above.
We are also required to explain the rights California residents hold under state law. You may:
Know and access. Submit a verifiable request covering: (1) the categories of personal information we collect, use or share; (2) the purposes for which each category is collected or used; (3) the categories of source those come from; and (4) the specific pieces of personal information we hold about you.
Receive equal service. Exercising your privacy rights will not cause you to be treated differently.
Delete. Submit a verifiable request to close your account, upon which we will delete the personal information we have collected about you.
Opt out of sale. Direct a business that sells consumer personal data not to sell yours.
We have one month in which to respond to a request. Contact us if you wish to exercise any of these rights, or if you want more information about them. Please note that we do not sell our users' personal information.
If anything here raises a question, please get in touch.
By email: support@chatbbot.com