Privacy and KVKK

Draft English translation for information only. If it differs from the Turkish version, the Turkish version prevails.

Last updated: October 18, 2026 · Version 2026-10-18.1

1. Data controller

The data controller for the personal data described in this text is the seller providing the service under the Wiozen brand. The data controller's name, address and contact details (e-mail, registered e-mail (KEP)) are published on the Legal information page on the Wiozen account site.

2. Collection method

Personal data is collected electronically, by automated means, from the following sources: from Wiozen when you sign in with your Wiozen account; from the forms you fill in on the panel and the files you upload; from the Instagram, TikTok and YouTube accounts you connect, through the intermediary publishing service (Upload-Post); from the source platforms of the video links you provide; and from the processing, security and cookie records created by the system while you use the service.

3. Personal data we process

• Account information: your e-mail address and user ID in your Wiozen account. You do not sign in to Forge with a separate password.
• Wiozen connection key: the key generated so that we can show your balance and write titles and descriptions with artificial intelligence; it is stored encrypted. The plan fee is not deducted using this key, but from your Wiozen balance through the charging permission granted to Forge in your Wiozen account.
• Social media connections: the username and connection status of the Instagram, TikTok and YouTube accounts you connect. We do not receive your passwords; publishing authorization is kept by the intermediary publishing service through which you connect your accounts.
• Platform statistics: the follower count, reach, views, impressions and profile visit counts of your connected accounts, and the views, likes, comments, shares and saves of videos published from Forge. We retrieve these regularly from the platforms through the intermediary publishing service, in order to show them to you on the Stats page.
• Content: videos you upload, video links you provide, logos and templates, titles and descriptions written or edited by you, notes you write for a video, and the videos produced.
• Rights declaration records: for each video, the source link and the time you declared that you have the right to use the video by adding it.
• Processing records: the processing status of videos, error records, publishing time, post IDs on the platforms, and your panel notifications.
• Plan, payment and consent records: your plan, period dates, use of video allowances, charges collected from your balance, the time of your "service starts immediately" consent given at purchase, and your IP address.
• Copyright notices: the name, e-mail address and content of notice-form submitters.
• Security records: session information and the IP address, date and request information in server access logs.

4. Purposes and legal grounds

• Opening your account, verifying your sign-in, processing videos, writing titles, rendering, publishing on the platforms you select on your instructions, showing your statistics, collecting the plan fee and calculating your video allowance: necessary for the establishment and performance of the contract (KVKK Art. 5/2-c).
• Keeping pre-purchase information, consent and collection records, sending renewal reminders, and responding to requests from competent authorities: expressly provided for by law and necessary to fulfil our legal obligations (Art. 5/2-a and Art. 5/2-ç; Consumer Protection Law No. 6502, Distance Contracts Regulation, tax legislation).
• Storing and reviewing rights declaration records and copyright notices, and defending ourselves in disputes: necessary for the establishment, exercise or protection of a right (Art. 5/2-e).
• Ensuring the security of the service, preventing misuse and overloading, and fixing errors: our legitimate interest, provided it does not harm your fundamental rights and freedoms (Art. 5/2-f).

5. Who we transfer data to

We do not sell your data. It is transferred only to the extent necessary for the service to work, to the following recipients:

• Wiozen account and balance service (same data controller): for sign-in, balance, collection and artificial intelligence requests.
• Artificial intelligence model providers (mainly in the USA): so that titles and descriptions can be written, the source title and description of the video, the note you write for the video, and your account's language, tone and field settings; transmitted via the Wiozen API.
• Upload-Post (TONVI TECH SL, Spain; servers in the EU): video, description, account connection information and statistics, for connecting social media accounts, publishing, and retrieving statistics.
• Instagram (Meta; USA and Ireland), TikTok (ByteDance; Singapore, USA and EU) and YouTube (Google; USA): video and text shared on the platforms you select, on your instructions. Publishing takes place under that platform's own rules and, depending on your account settings, is public to everyone.
• Video source platforms: when you provide a link, the video is downloaded from the platform to which the link belongs.
• Cloudflare (USA): network security and delivery of traffic; the IP addresses and request information of your visits pass through this service.
• Server hosting provider: the server where data is stored; the provider's name and country are stated on the Legal information page on the Wiozen account site.
• Competent public institutions and organizations and courts (Turkey): when there is a legal obligation.

6. Transfers abroad

Some of the recipients above are located abroad (USA, EU countries and Singapore). Transfers abroad are subject to the conditions set out in Art. 9 of KVKK. Using the service does not mean that you consent to these transfers. Transfers made at your request, such as publishing on the platforms you select, are necessary for the performance of the contract. The safeguards relied on for other recipients are explained on the Legal information page on the Wiozen account site.

7. Clips

In the Clips feature, the sound and transcript of a video may be transferred to artificial intelligence providers abroad for processing. Once the work is completed, downloaded audio and video segments are deleted; the source file you uploaded is deleted within 3 days, and clips and transcripts are deleted within 30 days. Face detection is performed only on our server; face data is not stored, and no identification is carried out.

When you connect a channel, the channel ID and name provided by the platform for the connection are stored. On Kick, an encrypted refresh token is kept to maintain the connection. During a broadcast, only the number of chat messages is kept; the content of messages and the person who wrote them are not stored, and the counts are deleted after 7 days. When importing from Google Drive, only the file you select is accessed; the access permission is not stored. You can remove a connection at any time from the "My Channels" page.

The use of data obtained from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

8. Retention periods

• Source videos and produced videos are deleted within 30 days after they are published or rejected. Videos held for you to download are also deleted within 30 days; temporary files created during upload are deleted within 1 day.
• Panel notifications are deleted after 90 days. A session remains open for at most 30 days.
• Logos and templates, social media connections and platform statistics are kept for as long as your account remains open; when you remove a social media account, no statistics are retrieved for that account.
• Plan, collection and purchase consent records are kept for 10 years from the transaction date (the general statute of limitations; this also covers the 5-year retention period under tax legislation).
• Rights declaration records and copyright notices are kept for 10 years from the date of recording, so that we can respond to possible rights claims.
• Video processing records and server access logs are kept for at most 2 years. Records of changes made by administrators in your account (for example, an additional video allowance or an account suspension) are deleted automatically after 2 years.
• When you request deletion of your account, data we are not obliged to retain is deleted or anonymized within 30 days at the latest.
• Except for the records stated above to be deleted automatically, we undertake to delete or anonymize records when their retention period expires.

9. Cookies

We use a mandatory session cookie to keep your session open, and a security cookie valid for 10 minutes during sign-in with Wiozen. We do not use advertising or tracking cookies. Fonts are also loaded from our own server; our pages do not send requests to third-party font services.

10. Your rights

Under Art. 11 of KVKK, you can apply to us to exercise the following rights:

• to learn whether your personal data is being processed,
• to request information about it if it has been processed,
• to learn the purpose of processing and whether data is used in accordance with that purpose,
• to know the third parties to whom data is transferred domestically or abroad,
• to request correction if data is incomplete or inaccurately processed,
• to request deletion or destruction of data under the conditions set out in Art. 7 of KVKK,
• to request that correction, deletion and destruction operations be notified to the third parties to whom data has been transferred,
• to object to a result arising against you from the analysis of processed data exclusively through automated systems,
• to claim compensation for damage you suffer due to unlawful processing.

You may remove your social media connections at any time from the Accounts page or from the settings of the relevant platform.

11. How to apply

You may submit your application in writing to the postal address on the Legal information page on the Wiozen account site, or to the registered electronic mail (KEP) address stated there. You may also write from the e-mail address registered in your Wiozen account to the e-mail address on the same page, or submit it via Wiozen's Help center (under the Communiqué on Procedures and Principles for Applications to the Data Controller). Your application must clearly state your name, surname, contact address and request. We will conclude your application free of charge, as promptly as possible depending on the nature of your request and at the latest within 30 days; if the process entails an additional cost, the fee set in the tariff determined by the Personal Data Protection Board may be charged. If your application is rejected, if you find the response insufficient, or if no response is given in time, you may lodge a complaint with the Personal Data Protection Board (KVKK Art. 14).