Under the KVKK, "personal data" means any information relating to an identified or identifiable natural person (gerçek kişi). Where you interact with us on behalf of an architectural firm, engineering practice or construction company (a legal entity / tüzel kişi), the provisions of this Policy apply only to the personal data of the individuals we deal with on that entity's behalf, such as a contact's name, work email address or role, and not to your organisation's corporate or business information, which is instead governed by any separate agreement between RemmeyAI and your organisation.
Protecting user data is our first priority. When you visit our Website, we collect a limited set of technical information automatically, including IP address, browser type, pages visited and session duration. This data is used solely to keep the Services running smoothly, detect potential abuse and understand aggregate usage patterns. It is never used to identify individual users.
You can browse our Website without sharing any personal information. If you choose to create an account, request a demo or use Layora, we will ask for certain details. Depending on how you use the Services, this may include:
We use the information we hold about you to deliver and improve our Services. Specific purposes include:
We rely on one or more of the following legal bases: your consent, the performance of a contract with you, compliance with a legal obligation, or our legitimate interest in operating and improving the Services. We will clarify the applicable basis on request.
You may request the deletion of personal information we hold about you at any time. To delete specific data or close your account entirely, please reach out to us directly. Where we are required to retain certain records for legal or compliance reasons, we will keep only what is strictly necessary and for no longer than required.
We do not sell your personal data, and we do not share it with third parties for their own marketing purposes. We may share information with:
We retain your personal data for as long as your account is active or as otherwise needed to fulfil the purposes described in this Policy, including legal and contractual obligations. Aggregated or anonymised data may be kept indefinitely. Once a retention period expires, data is deleted from active systems within 30 days and from backups within 90 days.
Our infrastructure may be located in multiple regions. If you are in the European Economic Area, the United Kingdom or Türkiye, your data may be transferred to and processed in countries with different data protection frameworks. When this occurs, we put in place appropriate safeguards, such as Standard Contractual Clauses for EEA/UK transfers, to ensure your information remains protected to the same standard required in your home jurisdiction. For personal data originating in Türkiye, cross-border transfers are carried out in accordance with Article 9 of the KVKK, for example, on the basis of your explicit consent, or, where a statutory exception applies, on the basis of an adequacy decision or appropriate safeguards (such as an undertaking approved by the Kişisel Verileri Koruma Kurulu) recognised under Turkish law.
Depending on your location, you may have the right to access, correct, delete or restrict processing of your personal data, to receive it in a portable format, to object to processing carried out on the basis of legitimate interests, and to withdraw consent at any time. To make a request, contact us at the address in Section 21. We will respond within 30 days. EEA and UK residents may also lodge a complaint with their national data protection authority. Residents of Türkiye may lodge a complaint with the Kişisel Verileri Koruma Kurumu (Turkish Personal Data Protection Authority), see Section 12 for rights specific to the KVKK.
Where we process your personal data on the basis of legitimate interests or a task carried out in the public interest, you may object at any time by explaining how the specific processing affects you. We will review the objection and either cease processing or provide compelling grounds for continuing.
If you are based in the European Economic Area, you have the following rights in relation to your personal data:
If you are located in Türkiye, your personal data is processed in accordance with the Law on the Protection of Personal Data No. 6698 ("KVKK"). For the purposes of the KVKK, RemmeyAI acts as the veri sorumlusu (data controller) for personal data processed through the Services. Our registered legal entity and VERBİS (Data Controllers' Registry) status, or the applicable registration exemption, will be published here once finalised.
Under Article 11 of the KVKK, you have the right to:
To exercise these rights, submit a written request to the contact details in Section 21, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. We will respond free of charge within 30 days, as required by the KVKK. If you believe your request has not been adequately addressed, you may file a complaint with the Kişisel Verileri Koruma Kurumu.
Send any privacy-related request to the contact details in Section 21. We may ask you to verify your identity before acting on the request. Please include enough detail for us to locate your information and understand what you are asking for. We will not be able to respond if we cannot confirm that the request relates to your data.
Our Services are intended for professional and business use and are not directed at anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.
We use cookies and similar technologies (including browser local storage) to keep the Site working, remember your preferences and understand how the Services are used. Cookies fall into the following categories:
By duration, cookies are either persistent (remain on your device until deleted or until they expire, typically used to remember preferences and measure usage over time) or session-based (deleted when you close your browser). You can adjust or disable cookies in your browser at any time, though disabling certain cookies may limit your access to some features. Instructions for common browsers: Chrome, Safari, Firefox, Edge and Opera.
Our Website does not track users across third-party sites over time. Some third-party services embedded in our pages may operate independently and maintain their own tracking practices, their policies govern that activity.
We use industry-standard technical and organisational measures to protect your information, including encryption in transit and at rest, access controls and regular security reviews. No system connected to the internet is entirely immune to risk. In the event of a breach that poses a meaningful risk of harm, we will notify affected users and relevant authorities as required by law.
If we become aware that your personal information has been accessed or disclosed without authorisation, we will investigate promptly, take steps to contain the incident and notify affected individuals by email where there is a reasonable risk of harm or where notification is legally required. Where the breach involves personal data processed in connection with Türkiye, we will notify the Kişisel Verileri Koruma Kurumu within 72 hours of becoming aware of the breach, in line with KVKK requirements, in addition to notifying affected individuals without undue delay.
We may update this Policy from time to time. If we make changes that affect how we handle your personal data in a meaningful way, we will let you know by email before those changes take effect. The updated Policy will apply from the date shown at the top of this page. Continued use of the Services after that date constitutes acceptance of the revised terms.
By using our Website and Services, you confirm that you have read and understood this Policy and agree to its terms. If you do not agree, please discontinue use of the Services.
For any questions about this Policy, requests to exercise your rights, or concerns about how we handle your data, please contact us at huseyin@remmeyai.com. If your request relates to the KVKK, please include "KVKK Talebi" in your subject line so we can route it correctly.