Privacy Policy

Effective Date: March 8, 2026

Last Updated: March 8, 2026

This Privacy Policy describes how saverelease ("we", "us", "our") collects, uses, shares, and protects your personal data when you use our platform at saverelease.com ("Platform"). This policy is designed to comply with the European Union General Data Protection Regulation (GDPR), the Turkish Personal Data Protection Law No. 6698 (KVKK), and other applicable data protection laws.

1. Data Controller

saverelease acts as the data controller for personal data collected through the Platform. For inquiries regarding your personal data, contact us at:

Email: privacy@saverelease.com

2. Personal Data We Collect

2.1 Data You Provide

Account Information: email address, username, display name, password (hashed).
Profile Information: avatar image, bio, social media links.
Content: release information, artwork, lyrics, platform links, and other materials you upload.
Payment Information: transaction records related to credit purchases (payment processing is handled by third-party providers; we do not store credit card numbers).
Communications: messages you send to us via email or support channels.

2.2 Data Collected Automatically

Device Information: browser type, operating system, device type.
Usage Data: pages visited, features used, time spent on pages, click patterns.
Log Data: IP address, access times, referring URLs, error logs.
Cookies and Similar Technologies: see our Cookie Policy for details.

2.3 Data from Third Parties

OAuth Providers: when you sign in with Google, we receive your name, email address, and profile picture as authorized by you.

3. Legal Basis for Processing (GDPR / KVKK)

We process your personal data based on the following legal grounds:

Contract Performance (GDPR Art. 6(1)(b) / KVKK Art. 5(2)(c)): to provide and maintain your account and the Platform services.
Legitimate Interest (GDPR Art. 6(1)(f) / KVKK Art. 5(2)(f)): to improve our Platform, prevent fraud, ensure security, and analyze usage patterns.
Consent (GDPR Art. 6(1)(a) / KVKK Art. 5(1)): for marketing communications and non-essential cookies. You may withdraw consent at any time.
Legal Obligation (GDPR Art. 6(1)(c) / KVKK Art. 5(2)(c)): to comply with applicable laws, regulations, and legal processes.

4. How We Use Your Data

To create and manage your account.
To provide, operate, and maintain the Platform.
To process transactions and manage credits.
To generate and serve smartlink pages.
To communicate with you about your account, updates, and support.
To detect, prevent, and address security issues, fraud, and abuse.
To analyze usage patterns and improve the Platform.
To comply with legal obligations.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your data with:

Service Providers: hosting (Vercel), database (Neon), file storage (Vercel Blob), email delivery, payment processors, and analytics providers who process data on our behalf under data processing agreements.
Legal Requirements: when required by law, regulation, legal process, or governmental request.
Business Transfers: in connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
With Your Consent: when you explicitly authorize sharing.

6. International Data Transfers

Your data may be transferred to and processed in countries outside of Turkey and the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by the European Commission.
Adequacy decisions by the European Commission or the Turkish Personal Data Protection Board.
Other legally recognized transfer mechanisms.

7. Data Retention

Account Data: retained for as long as your account is active, plus 30 days after deletion for backup purposes.
Transaction Records: retained for 10 years as required by Turkish commercial and tax law.
Log Data: retained for up to 12 months.
Marketing Consent Records: retained for the duration of consent plus 3 years.

After the retention period expires, data is securely deleted or anonymized.

8. Your Rights

Under GDPR and KVKK, you have the following rights:

Access: request a copy of your personal data.
Rectification: request correction of inaccurate or incomplete data.
Erasure: request deletion of your personal data ("right to be forgotten").
Restriction: request restriction of processing of your data.
Portability: receive your data in a structured, commonly used, machine-readable format.
Objection: object to processing based on legitimate interest or for direct marketing purposes.
Withdraw Consent: withdraw consent at any time where processing is based on consent.
Complaint: lodge a complaint with the Turkish Personal Data Protection Authority (KVKK Kurumu) or your local data protection authority.

To exercise your rights, contact us at privacy@saverelease.com. We will respond within 30 days (or sooner as required by applicable law).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption of data in transit (TLS/SSL) and at rest.
Password hashing using industry-standard algorithms (bcrypt).
Access controls and authentication mechanisms.
Regular security assessments and monitoring.
Bot protection via Cloudflare Turnstile.

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

The Platform is not directed to children under 13. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete such data promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@saverelease.com.

11. Third-Party Links

The Platform may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Platform.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform. The "Last Updated" date at the top indicates when the policy was last revised. Continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related inquiries:

Email: privacy@saverelease.com
Website: saverelease.com