Talonaris - Nousaxis · kvkk-2026-10-06
6 de outubro de 2026
This notice is prepared under Turkish Personal Data Protection Law No. 6698 by Salih Tekin, operating under the business name Talonaris Teknoloji, for the Nousaxis platform.
Controller: Salih Tekin (Talonaris Teknoloji)
Email: [email protected]
KEP: [email protected]
Website: https://nousaxis.io
| Category | Data | Purpose |
|---|---|---|
| Identity | Name, username, display name, birth date, gender, country | Account creation, age checks, profile display |
| Contact | Email and, if provided, phone | Verification, password reset, security notices, support |
| Financial | Plan, payment provider IDs, card brand and last four digits, invoices, NAT balance | Subscription, billing, limits, statutory records |
| Security | IP address, browser/device data, sessions, failed logins, cookie IDs, guest fingerprint | Account security, abuse prevention, guest entitlement control |
| User content | Prompts, AI answers, conversation titles/summaries, uploads, DMs, room messages, agent notes | Providing the service, history, moderation |
| Usage/preference | Query counts, modes, XP, Taloton matches, votes, agenda answers, language/theme | Limits, gamification, rankings, preferences |
| Model development content | If you give explicit consent: redacted questions, AI answers and council reports | Service quality measurement and algorithm/eval work |
| Recipient | Data | Purpose | Country |
|---|---|---|---|
| AI providers via OpenRouter | Prompts, history, images and document text | Answer generation | US / EU |
| OpenAI directly | Uploaded document text chunks | Embeddings for document search in Agent Mode | US |
| Tavily | First 400 characters of factual queries | Web search for Pro/Ultimate users | US |
| Paddle | Email, user ID, invoice data | Payment and subscription management | Ireland / US |
| Google Play / Apple | Email, purchase ID, purchase token | In-app subscription payment and verification | US / Ireland |
| Cloudflare | IP and browser data | Bot and attack protection | US |
| Google, GitHub, Apple | Account ID and email | Only if you choose social login | US |
| Resend | Email and message content | Verification and security email delivery | US |
| Telegram | Masked account identifiers | Operational system alerts | UAE / US |
| Contabo GmbH | All platform data (database, uploaded files, server logs) | Server hosting | Germany |
| Google (Firebase Cloud Messaging) | Device notification token, notification content | Mobile push notification delivery | US |
| Google (AdSense — web, AdMob — mobile) | Cookie / advertising identifier, IP address, device data | Ads on the free plan; personalization only with your advertising/marketing consent | US / Ireland |
| Groq | Prompts and conversation history | Answer generation on the free-quota lane | US |
| Twilio | Phone number, verification code | SMS delivery if you use phone verification | US |
| Public authorities | Requested data | Legal obligations | Turkey |
Data is collected automatically through the website, mobile app, cookies and server logs. Legal bases under Article 5 of Law No. 6698:
Nousaxis necessarily transfers prompts and content to AI providers located abroad. This transfer is based on your explicit consent. If you withdraw it, the core AI features cannot be used.
Medical and legal Agent Mode fields may involve health data or legal dispute information. These are special category personal data. We strongly recommend that you do not submit special category data to the platform.
Data is retained while your membership continues and until deletion is requested. Exceptions: security audit logs are retained for 30 days; chat uploads are deleted after 24 hours; redacted content records kept under the model development consent are automatically deleted after at most 90 days (and are also deleted if you withdraw that consent). If you used the platform as a guest without creating an account, your guest usage records (browser fingerprint, IP address, browser/device data) are deleted within at most 30 days. When you delete your account, your data is permanently deleted; however, financial records and payment provider notifications may continue to be retained in a de-identified form where legally required. Social room messages are retained with the identity link removed ("[deleted]") even if your account is deleted; media you attach to direct messages remains on the server until your account is deleted (deleting a message does not remove the file).
Under Article 11 of Law No. 6698, everyone has the right to apply to the data controller and:
You may exercise these rights through KEP at [email protected], from your registered email to [email protected], or with secure/mobile signature. Requests are answered within 30 days.
The effective date and version of this notice are stated at the top of the page. In case of material changes, you will be re-informed within the app.