Privacy

Privacy Policy

Last updated: October 2026 · Effective date: October 2026

This text is a translation provided for information purposes. In the event of any discrepancy between the Turkish text and this translation, the Turkish text shall prevail.

Ommini ("Ommini", "we") is an AI-powered content creation platform operated by YÜ-SER EM.İN.TA.TU.SE.T.M.S.G.H.T.M.M.B.P.Ü.İ.İ.SAN.LTD.ŞTİ. This Privacy Policy and Information Notice explains which personal data we collect, for which purposes and on which legal grounds we process it, to whom and where we transfer it, and your rights.

This text has been prepared under the Turkish Personal Data Protection Law No. 6698 (KVKK) and related legislation.

✅ Our core commitment: We never sell your personal data or the data obtained through the API to third parties under any circumstances.

1. Data Controller

The data controller for your personal data under the KVKK is:

Company name: YÜ-SER EM.İN.TA.TU.SE.T.M.S.G.H.T.M.M.B.P.Ü.İ.İ.SAN.LTD.ŞTİ.
Address: Emek Mah. Bişkek Cad. No: 125-127 İç Kapı No: 16, Çankaya / Ankara, Türkiye
Tax office and tax number: Maltepe Tax Office – 9880066398
Website: https://ommini.com
Email: destek@ommini.com

2. Data We Collect

2.1 Account and Identity Information

Name and surname
Email address
Password (stored encrypted/hashed, never kept in plain text)
Registration date

2.2 Content and Usage Data

Content, posts and documents you create on the platform
Entries in your prompt library
Calendar and scheduling data
Usage statistics (number of items generated, session duration, etc.)

2.3 Payment Information

Subscription plan and billing history
Records of payment transactions (transaction number, plan or credit package purchased, transaction date) and subscription status
Card numbers, CVV codes and bank details are not stored on Ommini servers. Card details are processed in compliance with PCI-DSS by iyzico, a licensed payment institution; in-app purchases in the mobile app are made through Apple (App Store) or Google (Google Play).

2.4 Social Media Connection Data

Name and platform ID of the social media account you connect
OAuth access tokens (stored encrypted)
Records of posts published through the platform

2.5 Technical Data

IP address and location information (country level)
Browser type and version
Session log records
Error and performance reports

3. Purposes and Legal Grounds for Processing

Your personal data is collected electronically through the website, the mobile app and the API, by automated or partly automated means, and is processed for the purposes below on the stated legal grounds.

Purpose	Legal Ground (KVKK)
Account creation and authentication	Performance of a contract (Art. 5/2-c)
Provision of the service and content generation	Performance of a contract (Art. 5/2-c)
Payment processing	Performance of a contract (Art. 5/2-c) / Legal obligation (Art. 5/2-ç)
Customer support	Legitimate interest (Art. 5/2-f)
Security and error tracking	Legitimate interest (Art. 5/2-f)
Service improvement and analytics	Explicit consent (Art. 5/1)
Fulfilment of legal obligations	Legal obligation (Art. 5/2-ç)

4. Third-Party Services and Data Transfers

4.1 Third-Party Services We Use

Your personal data is shared with the service providers below only for the stated purpose and only to the extent necessary for that purpose.

Service	Purpose	Location
Namecheap, Inc.	Server hosting (all platform data)	USA
iyzico	Payment processing	Türkiye
Apple (App Store) and Google (Google Play)	In-app purchases in the mobile app	Outside Türkiye
Anthropic (Claude)	AI text generation	Outside Türkiye
OpenAI	Voice generation (text-to-speech)	Outside Türkiye
ElevenLabs	Voice generation (text-to-speech)	Outside Türkiye
fal.ai	Video generation	Outside Türkiye
Suno (via Apiframe)	Music generation	Outside Türkiye
Crisp	Live support chat	Outside Türkiye
Google Analytics	Website visit statistics	Outside Türkiye
Social media platforms you connect (LinkedIn, X, YouTube, Instagram, Facebook, TikTok, Pinterest)	Publishing content at your request	Outside Türkiye

4.2 YouTube API Notice

Users of our YouTube integration acknowledge that they are subject to the Google Privacy Policy. You can revoke Ommini's access to YouTube on the Google Security Settings page.

4.3 Transfers Abroad

Our platform servers are located in the United States of America, and the service providers marked "Outside Türkiye" in the table above are established outside Türkiye. Your personal data is therefore transferred abroad so that the service can be provided. The transfer is limited to the service providers listed above and to the data necessary to provide the service.

4.4 No Sale of Data

We never sell user data or data obtained through the API to third parties under any circumstances. Data is shared with third parties only in the following cases:

With service providers that are essential for providing the service (the list above)
Where required by law or by a court order
Where you have given your explicit consent

5. Data Retention Periods

Data Type	Retention Period
Account information	Until the account is deleted + 3 years
Content and documents	As long as the account is active
Payment records	10 years (legal obligation)
Log records	90 days
Social media tokens	Until the connection is removed

6. Data Security

All data is transmitted encrypted via HTTPS/TLS.
Passwords are stored hashed with the bcrypt algorithm.
Social media access tokens are stored encrypted.
Card details never reach Ommini servers; they are processed by iyzico for web payments and by Apple or Google for in-app purchases in the mobile app.
Server access is logged and regular security audits are performed.

7. Your Rights under the KVKK

Under Article 11 of the KVKK, you have the following rights:

To learn whether your personal data is processed
To request information if your personal data has been processed
To learn the purpose of processing your personal data and whether it is used in line with that purpose
To know the third parties to whom your personal data is transferred in Türkiye or abroad
To request correction of your personal data if it is incomplete or inaccurately processed
To request deletion or destruction of your personal data under the conditions set out in Article 7 of the KVKK
To request that correction, deletion or destruction be notified to third parties to whom your personal data has been transferred
To object to an outcome against you arising from the analysis of your processed data exclusively by automated systems
To claim compensation for damages if you suffer damage due to the unlawful processing of your personal data

You can submit your requests in writing to our address stated above, or to destek@ommini.com from the email address registered in our system. Depending on their nature, your requests will be concluded free of charge as soon as possible and within 30 days at the latest; if the process requires an additional cost, a fee may be charged according to the tariff set by the Turkish Personal Data Protection Board.

8. Cookies

Our platform uses cookies for session management, saving preferences and improving the user experience. For details, please see our Cookie Policy.

9. Children's Privacy

Our platform is not intended for individuals under the age of 18. We do not knowingly collect data from persons under 18. If you become aware of such a case, please let us know.

10. Changes to This Policy

This policy may be updated from time to time. Significant changes will be announced by email or through a platform notification. You can follow the update date in the "Last updated" field above.

11. Contact and Applications

For questions about our privacy policy or your personal data:

Email: destek@ommini.com
Address: Emek Mah. Bişkek Cad. No: 125-127 İç Kapı No: 16, Çankaya / Ankara, Türkiye
Website: https://ommini.com

If your applications under the KVKK remain unanswered, you have the right to file a complaint with the Turkish Personal Data Protection Authority (KVKK): www.kvkk.gov.tr