Privacy Policy
Last updated: 29 July 2026
This is a draft. It should not be treated as binding before company details are filled in and a lawyer has reviewed it.
EyeRival (the "Service") is operated by [Şirket unvanı] ("we"). This page explains what personal data we process, why, and what rights you have. Turkish law (KVKK) applies to this service; the Turkish version of this document prevails in case of conflict.
1. Data we process
Account data: your email address and an irreversible hash of your password. We never see, store or recover the password itself.
Service usage data: the URLs you track, their snapshots, detected changes and related timestamps.
Technical data: IP address, browser and device information, session records, access times.
With your consent only: session recordings and heatmaps (mouse movement, clicks, scrolling). Password fields and sensitive content are masked automatically.
Payment data: once payments go live, card details are never visible to us and are processed solely by a licensed payment provider.
2. Why we process it
To create your account, run scans and send notifications — necessary for performing our contract with you.
To keep the system secure and prevent abuse — legitimate interest.
To meet legal retention and disclosure obligations — legal obligation.
To measure and improve the product (session recording, heatmaps) — explicit consent only. Declining does not restrict your use of the Service and you may withdraw consent at any time.
3. Who we share it with
Supabase (database and authentication), Vercel (hosting), Resend (email delivery), Microsoft Clarity (analytics, with consent only), Google Gemini (change summaries).
Some providers process data outside Türkiye. Cross-border transfers rely on your explicit consent or another lawful basis under KVKK Article 9.
Only the changed text of the page you track is sent for summarisation; your account details are not included.
We do not sell personal data to third parties.
4. Retention and deletion
We keep your data for as long as your account remains open.
Deleting your account permanently removes your trackers, snapshots and change history. This cannot be undone.
Records we are legally required to retain are kept for the statutory period.
5. Your rights
You may ask whether your data is processed, request information and correction, request deletion, object to processing, and claim compensation for unlawful processing.
Send requests to info@eyerival.com. We respond within thirty days at the latest.