Privacy Policy

Introduction

We respect your privacy and are committed to protecting your personal data. With this Privacy Policy ("Policy"), Teknoma Teknolojik Ltd Sti ("Teknoma", "we", "us") explains how it collects and processes your personal data, how it protects it, and your rights.

Teknoma operates belit.ai and is the data controller of the personal data described in this Policy. The Policy applies to the website at belit.ai ("Website") and to the belit.ai marketing agent that invited customers sign in to ("Services"), and describes their processing separately where it differs.

Teknoma's registered address is İzmir Teknoloji Geliştirme Bölgesi İYTE, 35430, Urla, İzmir.

The use of belit.ai is governed by this Policy and the Terms of Use ("Terms"), whose definitions apply here. By using belit.ai, you agree to the processing of personal data in accordance with this Policy. If you do not agree with the Terms or this Policy, please do not use belit.ai.

The Services are in private testing. At the date of this Policy they are used only by Teknoma's founders, and no customer's data is processed in them. This Policy describes the processing that applies once an invited customer uses them.

Information we collect and purposes of processing

The Website sets no cookies, stores nothing in the visitor's browser, runs no analytics or third-party trackers, has no forms or accounts, and serves its own typeface. Its "Ask for early access" buttons open the visitor's email application, addressed to hello@belit.ai.

We may collect the following personal data when you use the Website or the Services:

1. Account and contact information

• Name, email address and user identifier received from Google when you sign in to the Services.
• Email address, name and message content when you write to us at hello@belit.ai or support@belit.ai.

Sign-in to the Services is with Google through Amazon Cognito, and only accounts invited by Teknoma may sign in. This information is used to sign you in, to determine your workspace and the actions you may approve, to reply to your messages, to consider requests for early access, and to communicate with you about your account.

2. Technical data

• IP address, browser type, the page or resource requested and the time of each request.

The Website is served by Firebase Hosting, a Google service, which processes these details for each request to deliver the Website and detect abuse, and retains IP addresses for that purpose for a few months. The Services keep similar server logs. These data are processed to deliver and secure the Website and the Services and to correct errors; they are not used to identify Website visitors.

The Services set only the cookies strictly necessary to keep you signed in, and store display preferences, such as light or dark mode, in your browser. They run no analytics, advertising or tracking cookies.

3. Content provided to the Services

• A GitHub repository connected by the User, a public web address, or the answers given in the intake form.
• Edits, feedback and the reasons given when a proposal is rejected.

A repository is connected by installing Teknoma's GitHub App on exactly one repository chosen by the User. The App has read-only access to that repository's contents and metadata and cannot change anything. This content is processed solely to understand the User's product and perform the work requested.

When publishing to Meta becomes available, the User will be able to connect its own Meta ad account. Teknoma will store the access granted in encrypted form, use it only to publish the advertisements the User approved and to read their performance, and delete it on disconnection.

4. Output and approval records

• Product profiles, competitor sets, strategies and, when available, advertisements produced by the Services, with every version.
• Each approval, edit and rejection, by whom and when.

These records are kept so that the User can see what was approved and so that the Services can continue from it.

5. Usage and cost records

• For every model and research call: the provider, the model, the number of tokens or requests, and the cost.

These records are processed to show the User the cost of each step against the workspace's budget and, once paid plans are offered, to bill accurately.

6. The information disclosed by users

In line with the data minimisation principle, Teknoma does not process data beyond the above that the Services do not need. Information shared by email or other means outside the Services is deemed disclosed by the User and is protected under applicable law and this Policy. Users should provide only content they own or are authorised to use, and no personal data the Services do not need, such as their own customers' details in a repository.

Legal grounds for processing

Teknoma processes personal data on the following grounds under Article 5 of KVKK and Article 6 of the GDPR:

• Performance of a contract: providing the User's account and the Services, and steps taken at the User's request, such as replying to emails.
• Legitimate interests: keeping belit.ai secure, correcting errors, and researching public information about the User's market, where these interests are not overridden by the rights of the persons concerned.
• Legal obligations: keeping records required by law and responding to lawful requests from authorities.

Teknoma does not process personal data for advertising.

Sharing of information

Your personal data will not be sold, traded or otherwise transferred to third parties for commercial purposes. It may be shared for the reasons explained below.

(a) Service providers

Teknoma shares personal data with service providers that process it on Teknoma's behalf and only to provide belit.ai:

• Amazon Web Services: sign-in (Amazon Cognito), workspace data and the evidence collected by the Services, hosted in the Frankfurt region of the European Union.
• Vercel: hosting of the Services' web application when the Services run in the cloud.
• Google: sign-in with Google, Website hosting (Firebase Hosting) and Gemini models.
• AI model providers: Anthropic (Claude), OpenAI and Google (Gemini), which receive the content needed for each step under their terms for business use of their APIs.
• Research providers, such as SearchAPI.io, which perform the web and ad-library searches requested by the Services.
• LangChain (LangSmith): technical traces of the agent's runs, such as timings, model names and token counts. The User's content and the agent's output are removed from these traces before they are sent.

(b) Connected third-party services

When the User connects GitHub, the Services read the chosen repository through Teknoma's GitHub App. When publishing becomes available and the User connects Meta, the Services will send Meta the advertisements the User approved. GitHub and Meta process such data under their own terms and privacy policies.

(c) Law enforcement and public authorities

Teknoma may preserve and disclose information if it believes in good faith that doing so is required to comply with legal process, such as a court order; to protect the rights, property or safety of you, Teknoma or others; to enforce its contracts; or to assist an investigation of suspected illegal activity.

(d) Sale of business

Teknoma reserves the right to transfer information to a third party in the event of a sale, merger or other transfer of all or substantially all of its business or assets. The recipient shall treat the information in accordance with this Policy.

AI use: Certain functionalities rely on AI models, and their outputs may not always be unique, accurate or error-free; for this reason every step of the Services waits for the User's approval. Users are solely responsible for their inputs and for ensuring that their use of the output complies with applicable laws, including labelling AI-generated content where required.

Public information about other companies: To research the User's market, the Services read public web pages, app store listings and reviews, and Meta Ad Library advertisements, in accordance with each website's robots.txt rules. These may contain personal data, such as a reviewer's display name. Teknoma uses this information only to describe the User's market and keeps it as the evidence behind the agent's findings; it does not use it to contact or profile those persons.

International transfers

Teknoma is established in Türkiye. Its hosting is in the European Union (Amazon Web Services, Frankfurt), and some of its service providers, including the AI model providers, process data in the United States and other countries. Firebase Hosting is a global service, so requests to the Website may be processed in any Google location. Where personal data is transferred outside Türkiye or the European Union, Teknoma relies on the safeguards required by law, such as standard contractual clauses.

Storage of information

Retention of personal information: Teknoma stores personal data only as long as necessary for the purposes for which it was collected: while the account is open, and afterwards as necessary to resolve disputes, establish legal defences, comply with law and enforce its agreements.

Data destruction and anonymisation: When personal data is no longer necessary, Teknoma securely deletes or destroys it, or irreversibly anonymises it.

Data deletion: You may request the deletion of your personal data at any time by writing to support@belit.ai. Upon verification of the request, Teknoma shall delete the relevant personal data in accordance with applicable law. Deleted data, including the workspace's products, strategies and history, cannot be recovered.

Security measures

Teknoma implements technical and organisational measures to protect personal data, including:

• Access controls: only invited accounts may sign in, every request is checked against the workspace it belongs to, and access to personal data is limited to persons who need it to operate belit.ai.
• Separation of functions: the part of the Services that reads the web cannot publish; the part that publishes cannot call an AI model; the GitHub App can only read the one repository the User chose.
• Encryption: data is transmitted over encrypted connections, and ad-account credentials will be stored in encrypted form.
• Approval before publication: nothing is written to the User's systems or ad account before the User approves the exact version shown.
• Data minimisation: only the personal data necessary for the purposes above is collected and kept.

No digital environment is fully secure. Users should keep their Google account secure and report any suspected incident to support@belit.ai immediately. Teknoma shall investigate, mitigate the risks, and notify the persons concerned and the authorities where the law requires.

Your rights

Rights under KVKK

Under Article 11 of Türkiye's Personal Data Protection Law No. 6698, you have the right to: learn whether your personal data is processed and request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties in Türkiye or abroad to whom it is transferred; request correction of incomplete or inaccurate data; request its deletion or destruction; request that third parties to whom it was transferred be notified of a correction or deletion; object to a result against you arising solely from automated analysis; and claim compensation for damage arising from unlawful processing.

Rights under the GDPR

If you are in the European Union or the European Economic Area, you have the following rights:

• Right to access: obtain confirmation of, and access to, the personal data being processed.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of personal data under certain conditions.
• Right to restrict processing: request limitation of processing in specific situations.
• Right to data portability: receive personal data in a machine-readable format and transfer it to another controller.
• Right to object: object to processing, in particular for direct marketing.
• Rights related to automated decision-making: not to be subject to decisions based solely on automated processing, unless certain conditions apply.

To exercise these rights, send an email to support@belit.ai stating the right you wish to exercise, with your name and contact details. A response shall be provided within the legal time limit: 30 days under KVKK and one month under the GDPR. You may lodge a complaint with Türkiye's Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu) and, if you are in the European Union or the European Economic Area, with the data-protection authority where you live or work.

Children

belit.ai is intended for businesses and is not directed at children. Teknoma does not knowingly collect personal data from persons under 18. If you believe a child has provided personal data, please write to support@belit.ai and it shall be deleted.

Updates to this policy

Teknoma may update this Policy to reflect changes in its practices or legal obligations. Updates take effect upon publication, and the revision date is stated at the top. Users who do not agree with an update should discontinue using belit.ai.

Contact

If you have any questions or concerns regarding this Policy or Teknoma's data practices, please contact support@belit.ai.

Teknoma Teknolojik Ltd Sti

İzmir Teknoloji Geliştirme Bölgesi İYTE, 35430, Urla, İzmir