Privacy Policy and KVKK Information Notice

This document applies to all services provided through the LinqCheck website (https://linqcheck.com), membership system, product page analysis and Content Studio.

LinqCheck is a web-based SaaS service that analyses how understandable product pages are to artificial intelligence systems and assists with product content creation. This Policy explains what personal data is processed, for what purposes and on what legal grounds.

The service is provided under the LinqCheck brand in the capacity of data controller.

For any request or question concerning personal data:

hello@linqcheck.com

Note: The legal entity name, address and tax/MERSIS information of the data controller will be added to this Policy following legal review.

The following categories of data may be processed while providing the service:

• Identity and account information: full name or Google profile name, email address, Google profile image where available, user and account identifiers.
• Session and authentication information: login date/time, session tokens and authentication data transmitted by the authentication provider. Passwords are not stored by LinqCheck in plain text; they are securely managed by the authentication provider (Supabase Auth).
• Usage and transaction information: analyses you create, product URLs you submit, product information you enter manually, Content Studio inputs and outputs, and credit usage history.
• Technical and security data: IP address, browser and device information, error, security and access logs.
• Communication data: content you provide when contacting us for support.

When using Sign in with Google, LinqCheck requests only the following OAuth 2.0 scopes:

• openid — authentication
• email — email address
• profile — name and profile image, where available

LinqCheck does not access your Google Drive, Gmail, Contacts, Calendar or other Google services and cannot access your Google account password.

Data received from Google is used only to:

• Create and identify your account
• Verify your identity when signing in
• Manage sessions and protect account security

LinqCheck uses Google OAuth solely for authentication and basic profile information such as name and email. It does not access Google Analytics or Search Console data through Google OAuth.

Personal data may be processed for:

• Creating and managing memberships and sessions
• Providing analysis services and delivering results
• Processing product page information submitted by users
• Providing AI-assisted recommendations and content generation
• Managing free credits and usage rights
• Storing analysis and content history within the user's account
• Troubleshooting and improving service quality
• Preventing security threats, abuse and fraud
• Responding to support requests
• Complying with legal obligations

Processing for the purposes above is based, where applicable, on the legal grounds set out in Article 5 of KVKK, including:

• Establishment or performance of a contract
• Legitimate interests
• Compliance with legal obligations
• Establishment, exercise or protection of a right
• Explicit consent where required, such as for optional cookies or marketing communications

Personal data may be collected through:

• Registration and login forms
• Google OAuth authentication
• Product URLs submitted for analysis and automated content extraction
• Product and content information entered manually
• Content Studio inputs and outputs
• Browser and server logs
• Support emails and communications

To provide the service, data may be shared with contracted service providers to the extent necessary.

Current providers and their roles include:

• Supabase (managed through Lovable Cloud): authentication, database, session management and file hosting (EU / US depending on Lovable Cloud deployment region)
• Lovable / Cloudflare Workers: application hosting, edge processing and content delivery (global edge network)
• Google (OAuth 2.0): authentication for Sign in with Google using only openid, email and profile scopes (global)
• Lovable AI Gateway (Google Gemini 2.5 Flash model): product page content extraction, category classification, analysis and content-generation prompts (US / EU depending on provider region)
• Lovable managed email delivery (send.linqcheck.com): account verification, password reset and transactional notifications (EU / US)

Some providers may operate servers outside Türkiye and data may therefore be transferred abroad. Such transfers are carried out within the framework of safeguards required under applicable law.

Product URLs and content are transmitted through Lovable AI Gateway to the Google Gemini model for analysis and content generation. Whether such data is used for model training is subject to the relevant provider's own terms; LinqCheck does not provide an independent guarantee regarding such use.

Personal data is retained only for as long as necessary for the relevant processing purpose and applicable legal retention requirements.

General approach:

• Active account information: while the account remains active
• Analyses and generated content: until the account or relevant data is deleted
• After account closure: for a reasonable period where required by legal obligations, after which data is deleted or anonymised
• Security and access logs: for a limited period for security purposes
• Support correspondence: for resolution of the request and a reasonable follow-up period

Under Article 11 of KVKK, you may have the right to:

• Learn whether your personal data is processed
• Request information about such processing
• Learn the purpose of processing and whether data is used consistently with that purpose
• Know third parties to whom personal data is transferred in Türkiye or abroad
• Request correction of incomplete or inaccurate data
• Request deletion or destruction where the statutory conditions are met
• Request notification of correction, deletion or destruction to third parties to whom data has been transferred
• Object to a result arising against you through analysis exclusively by automated systems
• Claim compensation for damage resulting from unlawful processing

Requests may be submitted to:

hello@linqcheck.com

If you reside in the European Union, you may also have rights under the GDPR, including rights of access, rectification, erasure, restriction of processing, objection and data portability.

Requests may be submitted using the same contact address. You may also have the right to lodge a complaint with your competent supervisory authority.

Account deletion requests are currently handled by contacting hello@linqcheck.com. A self-service deletion feature through Settings is planned.

Following a deletion request, analysis and content data associated with the account will be deleted or anonymised within a reasonable period. Records that must legally be retained, such as certain security or financial records, may continue to be stored in a limited manner for the applicable statutory period.

LinqCheck uses strictly necessary cookies for session management, security and core functionality.

LinqCheck may also use analytics cookies, including Google Analytics, only where the user has provided the required consent.

Analytics cookies must not be loaded before consent.

LinqCheck currently does not use third-party advertising or marketing cookies.

For further information, see the Cookie Policy.

Measures used to protect data generally include:

• Role-based authorisation and row-level access controls
• Server-side administration operations
• Encrypted HTTPS communications
• Session security managed by the authentication provider
• Monitoring of access and security logs

No system transmitted over the Internet can be guaranteed to be 100% secure; however, LinqCheck seeks to apply reasonable technical and organisational safeguards.

LinqCheck is designed for professional users and is not intended for persons under 18.

We do not knowingly collect personal data from children. If you become aware that a child has provided data to LinqCheck, please contact hello@linqcheck.com.

This Policy may be updated from time to time. Material changes may be announced through the website or by email.

The current "Last updated" date must always be displayed at the top of the page.

This English version is provided for informational purposes. In the event of any inconsistency or difference in interpretation between the Turkish text and this English translation, the Turkish text shall prevail.