Consent to transfers of data abroad

This text asks for your explicit consent to a transfer of personal data abroad under Article 9 of Turkish Personal Data Protection Law No. 6698 (KVKK). It is separate from the KVKK notice and the Privacy policy: those inform you; this text only asks for your consent to the transfer described below.

Consent is optional. Not giving it does not affect your account, your payments or the rest of Deckfy.

Your explicit consent covers only this transfer:

• The posts (reference images) and logo you upload to read the brand style are sent to Anthropic (US), which reads colours, typeface and layout from them. You or other people may appear in these images.
• Before they are sent, the images are shrunk and stripped of embedded details such as camera, location and date.

This transfer happens only while your consent is valid, and only when you start reading the brand style.

We work with these providers abroad to run Deckfy. Only the transfer in section 2 rests on this consent; the others are necessary to provide the service and do not rest on consent:

• Supabase (company in the US, data in Japan): your account, workspace, content, payment and consent records; to host and store the service.
• Resend (US, sending from Japan): your email address and the content of emails (sign-in code, contract copy, subscription notices); to send email.
• Anthropic (US): store details, the text of store reviews, brand profiles, notes you write and carousel text; to generate content. Your uploaded posts and logo are sent only with this consent.
• Dodo Payments (US, part of its payment infrastructure in India): your email address, your name if we have it, and payment numbers; to sell the paid plan. Dodo collects what you enter on its payment page directly from you.

There is no adequacy decision of the Personal Data Protection Board for these countries.

The transfers that don't rest on consent are necessary and regular, so under Article 9 of the KVKK they are made with the standard contracts published by the Board; these contracts are signed and the Authority has been notified. Explicit consent does not replace them; it is only for the optional transfer in section 2.

• Your data is processed in a country that may not protect it as well as Türkiye does.
• Exercising your rights against a provider abroad can be harder.
• That country's public authorities may access the data through legal channels.
• Security depends on the provider's own technical and organisational measures. Whether content sent is used to train models depends on the provider's own terms.

The brand style can't be read from your uploaded posts; the ready-made slide styles and every other part of Deckfy work just the same.

You can take your consent back at any time, without giving a reason, under Settings → Profile or by writing to alper@alpiworks.com.

• From that moment your uploaded posts and logo are not sent to Anthropic; a brand style reading still waiting stops too, and its credit is returned.
• Brand style settings already read stay in your account; you can delete your uploaded images from the brand page.
• Taking consent back does not affect transfers already made, nor the necessary transfers in section 3. To stop those, you can ask for your account to be deleted.

By ticking the box you confirm you have read this text and freely give your explicit consent to the transfer described in section 2. The date you give or take back your consent, the text's version and its scope are recorded.