1. Introduction

At Giderly ("We", "Us", "Service"), we respect your privacy. This Privacy Policy provides information about the personal information we collect, use, and share when you use our service.

2. Information We Collect

We collect the following information when you use our Service:

Account Information: Email address, full name, company name, and account type.
Documents and Data: Invoices and receipts you upload, images of these documents, and data extracted from these documents by Google Gemini AI (date, amount, tax number, etc.).
Employee Information: Names, surnames, and contact information of employees you define.
Technical Data: IP address, device information, browser type, and usage statistics.

3. Use of Data

We use the collected information for the following purposes:

To provide and improve our service
To process and analyze your invoices
To manage and secure your account
To provide customer support
To fulfill our legal obligations
To inform about service improvements and new features

4. Data Sharing and Processing

We only share your personal data with third parties in the following cases:

AI Processing: Your images and text content are securely processed via the Google Gemini API (Google Cloud) to extract data from your invoices and receipts. This data is not used to train the AI model.
Service Providers: Your data is stored on high-security servers on Supabase (infrastructure and database) and Google Cloud.
Legal Requirements: To meet legal requests from official authorities.

Important: Your expense data is absolutely not sold or shared with third parties for advertising purposes. Each company's data is logically isolated.

5. Data Security

We take industry-standard security measures to ensure the security of your data:

Your data is stored encrypted (encryption)
Secure HTTPS connections are used
Regular security audits are performed
Access controls and authentication mechanisms are applied
Your data is stored on secure cloud infrastructure like Supabase

6. Data Retention

We retain your personal data as long as your account is active and as required by our legal retention obligations. When you delete your account, your data is securely deleted after legal retention periods.

7. Your Rights Under GDPR/KVKK

You have the following rights regarding your personal data:

To learn whether your personal data is processed
To request information if processed
To learn the purpose of processing and whether used appropriately
To know third parties transferred to domestically or abroad
To request correction if incomplete or incorrectly processed
To request deletion or destruction if reasons for processing disappear
To request notification of correction, deletion, or destruction to third parties
To object to a result against you by analyzing exclusively through automated systems
To demand compensation for damages due to unlawful processing

8. Cookies

We use cookies when you use our service. Cookies are used to improve your website experience, manage sessions, and perform usage analysis. You can manage cookies from your browser settings.

9. Children's Privacy

Our service is not intended for individuals under 18. We do not knowingly collect personal information from individuals under 18. If you are a parent or guardian and learn that your child has provided us with personal information, please contact us.

10. Policy Changes

We may update this Privacy Policy from time to time. We will notify you of significant changes. Continuing to use the service after changes means you accept the updated policy.

11. Contact

If you have questions about our privacy policy or want to exercise your rights, you can contact us:

Email: privacy@giderly.com