Data Protection Notice

1.Data controller and contact

The data controller is Lensmywork (Bornova, İzmir, Türkiye). Send data protection requests to info@lensmywork.com with the subject “KVKK Request”; requests are answered free of charge within 30 days.

2.Data we process

• Account data: name, email, password hash, session/device data and IP address.
• Business data: business name, address, phone, category, website and location.
• Measurement data: generated queries, AI answer texts, mention/rank/source records, reports and uploaded evidence.
• Payment data: plan, amount, invoice details and transaction reference. Card details are processed by iyzico and are never stored by Lensmywork.
• Usage data: cookies, access logs and — only with consent — product analytics events.

3.Purposes and legal bases

We process data to provide the service, run measurements and reports, manage subscriptions and invoices, answer support requests, secure the service and comply with legal obligations. The legal bases are performance of a contract (KVKK art. 5/2-c), legal obligation (art. 5/2-ç), legitimate interest (art. 5/2-f) and, where required, explicit consent (art. 5/1).

4.Retention and transfers

Reports are kept for 24 months, raw scan answers for 12 months, evidence for 24 months, payment records for 120 months and audit logs for 24 months. Data is stored with Neon (EU — Frankfurt) and Cloudflare R2 (EU), hosted on Vercel, and emails are sent via Resend. Queries are sent to AI providers such as OpenAI and Google. iyzico processes payments in Türkiye. PostHog (EU) is used only with analytics consent. Cross-border transfers rely on appropriate safeguards under KVKK art. 9.

5.Your rights

Under KVKK art. 11 you may learn whether your data is processed, request information, learn the purpose, know the recipients, request correction or deletion, object to automated analysis and claim compensation for unlawful processing. You may also complain to the Turkish Personal Data Protection Board after exhausting the request process.