Privacy Policy

1. Introduction

Hakanda ("we," "our," or "us") operates the Cinevido platform (the "Service"), an AI-powered creative studio accessible at cinevido.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and ensuring compliance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"), the European Union General Data Protection Regulation ("GDPR"), and other applicable data protection legislation. By using our Service, you consent to the data practices described in this policy.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Information You Provide Directly

• Account Information: When you register, we collect your name, email address, and password (stored in hashed form).
• Payment Information: Payment transactions are processed by Stripe, Inc. We do not store complete credit card numbers on our servers. We retain only transaction identifiers and billing details necessary for our records.
• API Keys: If you use our BYOK (Bring Your Own Key) feature, your fal.ai API key is encrypted using industry-standard AES-256 encryption before storage.
• User Content: Images, videos, prompts, and other content you create or upload through the Service.

3.2 Information Collected Automatically

• Usage Data: We collect information about your interactions with the Service, including features used, generation history, and session duration.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Log Data: Server logs that record requests made to our Service, including timestamps and referring URLs.

4. Legal Basis for Processing

Under KVKK and GDPR, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary to perform our contract with you and provide the Service.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our Service, preventing fraud, and ensuring security.
• Legal Obligations: Processing necessary to comply with applicable laws and regulations.
• Consent: Where required, we will obtain your explicit consent before processing your data for specific purposes.

5. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service
• To process transactions and send related information
• To communicate with you regarding updates, support, and promotional materials (with your consent)
• To monitor and analyze usage patterns to improve user experience
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our terms

6. Third-Party Services

We engage trusted third-party service providers to assist in operating our Service:

7. International Data Transfers

Your information may be transferred to and processed in countries other than Turkey, including the United States and European Union member states. When we transfer data internationally, we implement appropriate safeguards in accordance with KVKK Article 9 and GDPR Chapter V, including Standard Contractual Clauses approved by the European Commission and adequacy decisions where applicable.

8. Data Security

We implement robust technical and organizational measures to protect your personal data:

• Encryption of data in transit using TLS 1.3
• AES-256 encryption for sensitive data at rest, including API keys
• Regular security audits and vulnerability assessments
• Access controls limiting personnel access to personal data
• Secure authentication mechanisms with hashed passwords

While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Account Data: Retained for the duration of your account and for 30 days following account deletion.
• Generated Content: Retained until you delete it or close your account.
• Transaction Records: Retained for 10 years as required by Turkish commercial and tax law.
• Log Data: Retained for 12 months for security and analytical purposes.

10. Your Rights

Under KVKK and GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to Restriction: Request limitation of processing in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw previously given consent at any time.

To exercise these rights, please contact us at privacy@hakanda.com. We will respond to your request within 30 days as required by law. You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or your local supervisory authority.

11. Cookies and Tracking Technologies

We use essential cookies strictly necessary for the operation of our Service:

• Session Cookies: To maintain your authenticated session.
• Security Cookies: To prevent cross-site request forgery and ensure secure transactions.
• Preference Cookies: To remember your settings and preferences.

We do not use third-party tracking cookies or advertising cookies. You may configure your browser to refuse cookies, but this may limit your ability to use certain features of the Service.

12. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete such information. If you believe we may have collected data from a minor, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice via email or through the Service. Your continued use of the Service after such modifications constitutes your acknowledgment of the modified policy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will endeavor to respond to all inquiries within a reasonable timeframe and in accordance with applicable legal requirements.