Privacy Policy and KVKK Notice

1. Introduction

This Privacy Policy explains how facadetool ("we", "us", or "our") collects, uses, and protects your personal information when you use our facade-to-technical-drawing conversion service.

2. Information We Collect

We collect the following types of information:

• Account Information: Phone number, email address, full name, Turkish ID number (for Turkish citizens)
• Payment Information: Credit card details, billing address, transaction history
• Visual Content: Facade photos you upload for processing
• Generated Content: Technical drawings created from your photos
• Atlas Contributions: Photographs you add to facadetool Atlas, where they were taken and the details you give them (see section 5)
• Usage Data: Credit usage, access times, download history
• Technical Data: IP address, browser type, device information, log files

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Process payments and manage credit balances
• Generate technical drawings from your facade photos
• Provide customer support
• Ensure system security and prevent fraud
• Improve our AI models only when you explicitly opt in
• Comply with legal obligations

4. Image Processing

The facade images you upload and the technical drawings generated from them are processed only to provide the service. Your files stay private and are not used for AI training unless you explicitly opt in. If you opt in, training use does not reveal your identity and remains protected under applicable data protection laws. Photographs you add to facadetool Atlas are different: once approved they are public, as described in section 5.

5. facadetool Atlas

facadetool Atlas (facadetool.com/atlas) is an open map of building photographs. Anyone can look at it; downloading images and adding photographs need a facadetool account. When you use it, we keep the following:

• Photographs you add: The file exactly as you sent it, with its name and size, and a copy made for viewing on the map. The viewing copy carries no location or other camera details. The file as you sent it stays in our archive, is not shown on the map, and may still hold what your camera wrote into it, such as the date, the camera model and the place.
• Location: Where each photograph was taken, read from the photograph when your camera recorded it, or the point where you placed it on the map. From it we find the country, city and street. For this, only the coordinates are sent to OpenStreetMap's Nominatim service, nothing about you.
• Details: The date the photograph was taken when the camera recorded it, the notes and titles you write, and what it shows (a facade, a door, a window or a detail).
• Photographer name and profile: Your photographer name (or your account name if you have not set one), stored with each photograph, and your display name and profile photo if you add them.
• Sharing policy acceptance: Before your first photographs go up, we ask you to accept the Atlas sharing policy. As the record of your consent we keep your account, your email address, the date and time you accepted, the version of the policy, the language it was shown in and the words you were shown.
• Uploads and downloads: Which account added each photograph and when, and a count of the uploads and downloads made by your account, so that fair use limits can be applied.
• In your browser: A few small settings, such as the theme and language, and a note that you accepted the sharing policy, so the question does not appear again while we check.

What is public. Every photograph is checked by us before it appears. While it waits, only you and we can see it; in the review we see the photograph, its details, and your account name and email address. Once approved, it is shown to everyone on the map at the place it was taken, with the place name, the date it was taken, your note and your photographer name as credit. Your email address is never shown. Photographs we decline are not published.

Use and removal. You keep the copyright on your photographs. Once approved, others may use them under the Atlas sharing policy: for research, documentation, teaching and design, with credit, and never for sale. You can ask us to correct a photograph's details or take it off the Atlas by writing to support@facadetool.com; copies downloaded while it was public are beyond our reach. If a photograph on the Atlas shows you or your property and you want it removed, write to the same address and we will review your request.

Map services. The Atlas map is drawn from OpenStreetMap data loaded from OpenStreetMap's servers, and place search sends the words you search for to OpenStreetMap's Nominatim service. Like any website, these servers see your IP address when your browser asks them for something.

6. Data Retention

• Images and Drawings: Permanently deleted after the specified retention period
• Atlas Photographs: Kept for as long as they are part of the Atlas, or until you ask us to remove them (see section 5)
• Payment Records: Retained for 10 years as required by tax laws
• Support Correspondence: Stored for up to 3 years, then deleted or anonymized
• Log Files: Retained for legally required periods for security and audit purposes

7. Data Sharing

We do not sell your personal information. We may share your data with:

• Payment processors to handle transactions
• Cloud service providers for data storage
• Everyone who visits facadetool Atlas, for the Atlas photographs you choose to add, once approved (see section 5)
• OpenStreetMap, for the Atlas map and place search, and to find the address of Atlas photographs from their coordinates
• Legal authorities when required by law

8. Data Security

We implement industry-standard security measures to protect your personal information, including encryption, secure servers, and regular security audits.

9. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to data processing
• Data portability

10. Security Policy

We take the security of your data seriously. The following measures are in place to protect your information:

• SSL/TLS Encryption: All connections to facadetool.com are encrypted using HTTPS with industry-standard TLS protocols.
• PCI-Compliant Payment Processing: Payments are handled by PayTR, a PCI DSS-compliant payment provider. We do not store, process, or have access to your raw credit card numbers.
• Access Control: We follow least-privilege principles. Only authorized personnel have access to systems, and access is logged for audit purposes.
• Data Storage & Backups: Data is stored on secure, encrypted cloud infrastructure with regular backups and disaster recovery procedures.
• Monitoring & Logging: We maintain security logs and monitor systems for suspicious activity.
• Report Security Issues: If you discover a security vulnerability, please report it to support@facadetool.com. We appreciate responsible disclosure.

11. Contact

For privacy concerns or to exercise your rights, contact us at support@facadetool.com

Data Controller

In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), your personal data may be processed by facadetool.com as the data controller within the scope described below.

Processed Personal Data

The following personal data is processed when you register with facadetool:

• Identity Information: First name, last name. Additionally, for users requesting invoices: Turkish ID number or tax ID number.
• Contact Information: Phone number, email address. Additionally, for users requesting invoices: billing address.
• Payment Information: Payment amount, credit package used, transaction dates, and invoice details. Your credit card information is not stored in facadetool systems; payment transactions are securely processed by PayTR, our payment service provider.
• Visual Data: Facade photos you upload
• Atlas Data: Photographs you add to facadetool Atlas, where they were taken, the details you give them, your photographer name, and the record of your acceptance of the Atlas sharing policy (email address, date and time, version). Details are in section 5, facadetool Atlas.
• Transaction Information: Generated technical drawings, amount of credits used, transaction dates
• Technical Data: IP address, log records, session information

Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• To create and manage your account
• To manage your credit balance and perform transactions
• To generate technical drawings from your facade photos
• To publish the photographs you add to facadetool Atlas on the map after review, credited to you, and to keep the record of your consent to the Atlas sharing policy
• To ensure system security and resolve technical issues
• To fulfill legal obligations (invoicing, record keeping, etc.)
• To prove that the service was provided in case of payment disputes
• To provide customer support services
• To develop our AI models only when you explicitly opt in

Storage and Deletion of Personal Data

Your personal data is stored for the period required by processing purposes and within the scope of legal retention obligations:

• Images and Technical Drawings: Permanently deleted after the specified retention period following transaction completion
• Atlas Photographs: Kept for as long as they are part of the Atlas, or until you ask us to remove them
• Invoice and Payment Records: Retained for 10 years as required by tax legislation
• Support Requests and Email Correspondence: Stored for up to 3 years, then deleted or anonymized
• Log Records: Retained for legal storage periods for security and audit purposes

Artificial Intelligence Processing

The facade photos you upload and the technical drawings generated from them are processed by facadetool's proprietary AI models and technical infrastructure. These processes:

• Are conducted to generate technical drawings from your selected images
• Remain private and are used to improve facadetool's AI models only if you explicitly opt in
• Are performed in a manner that does not reveal your identity
• Are protected in accordance with KVKK and relevant legislation

Transfer of Personal Data

Your personal data may be transferred to:

• Payment service providers (for payment processing)
• Cloud service providers (for data storage)
• Everyone who visits facadetool Atlas (the Atlas photographs you choose to add, once approved, with your photographer name)
• OpenStreetMap (only the coordinates of Atlas photographs, to find their address)
• Legal authorities (for fulfilling legal obligations)

in order to fulfill the purposes stated above. All transfers are carried out in accordance with KVKK provisions.

Rights of the Data Subject

In accordance with Article 11 of KVKK, you have the following rights:

• To learn whether your personal data is being processed
• To request information if your personal data has been processed
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose
• To know the third parties to whom personal data is transferred domestically or abroad
• To request correction if personal data is incomplete or incorrectly processed
• To request deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of KVKK
• To request notification of operations regarding the correction, deletion or destruction of personal data to third parties to whom personal data has been transferred
• To object to the emergence of a result against you by analyzing processed data exclusively through automated systems
• To request compensation for damages in case of damage due to unlawful processing of personal data

Application Method

To exercise your rights stated above, you can apply to us via email at support@facadetool.com or by registered mail. Your applications will be finalized free of charge within 30 days at the latest. If the transaction requires an additional cost, the fee specified in the tariff determined by the Personal Data Protection Board may be charged.