KVKK Disclosure (Summary)

Last updated: September 21, 2026

This is a short English summary of the disclosure required by the Turkish Personal Data Protection Law No. 6698 (KVKK). The authoritative, legally binding version is the Turkish text at /tr/kvkk; in case of any difference, the Turkish version prevails.

Summary

  • Data controller: the venture operating Letterin (working name); the legal entity name and address will be added before launch.
  • Data processed: account and contact details, CV content (experience, education, skills), an optional photo (off by default, opt-in), job postings you paste or read with the browser extension (with the page address), AI usage metrics, and where your first visit came from (campaign tags, the name of an ad click identifier but not its value, the referring domain, the landing page, the date) with a random visitor identifier, kept in a first-party cookie (letterin_ft) and saved to your account once when you sign up. No special-category data is requested or given a dedicated field.
  • Purposes: providing the CV builder, AI text tailoring you initiate, PDF export, fair-use metering, and measuring which promotion channels work and what acquiring a user costs.
  • Legal bases: performance of a contract, legitimate interest, and — for transfers abroad — your explicit consent.
  • Transfers: hosting on Supabase (cloud) and, when you use AI features, transmission of the relevant text to the configured AI providers (currently OpenAI for reading and scoring and Google Gemini for writing, both via the OpenRouter API gateway, plus TypeSafe for the match verdicts when an English CV is scored against an English posting), whose servers are located abroad. Cross-border transfer relies on your explicit consent per KVKK art. 9. If you choose to save a CV to Google Drive (optional, Pro), the file goes from your browser straight to Google with our servers as no intermediary, under the "drive.file" permission alone. If you import a CV by picking it from Drive, that one file is sent to our servers like an uploaded CV and read by the AI providers above.
  • Retention: as long as your account exists; account deletion permanently removes your data, subject to statutory retention duties.
  • Your rights (KVKK art. 11): access, information, rectification, erasure, objection and compensation. You can also export your data and delete your account directly in the app.

Requests: info@letterin.app. Requests are answered free of charge within 30 days at the latest.