YOUR DATA AND RIGHTS

Privacy notice

Contact saless · Version kvkk-2026-09-12-v1 · 12 September 2026

Data controller and contact

Arda Şener, who manages consulting requests under the Hello World AI name, is the data controller for this form. Send requests and questions to architec1@wwwhelloworldai.com.

What information and for what purpose?

Your name, email, optional mobile number, preferred day, project summary, discount code and quote details are collected through the electronic form to review the request, establish scope and availability, and respond to you. Providing a phone number is optional. This form does not request card details, identity documents or health data.

The notice version, acknowledgement time and language are saved with the request. The security check reduces automated submissions; it does not verify ownership of your phone number. Your number is not added to marketing, bulk SMS or automated WhatsApp lists.

Basis for processing

Request and quotation processing relies on Article 5(2)(c) of Turkish Law No. 6698 for data directly related to establishing or performing a contract; security controls rely on Article 5(2)(f), subject to protecting your fundamental rights and freedoms. Article 5(2)(e) or 5(2)(ç) is assessed where records are needed for a legal claim or obligation.

The acknowledgement checkbox is not a consent contract or marketing permission. If another purpose requires explicit consent, it will be explained separately while preserving your choice.

Access, hosting and transfers

Within the application, customer details are accessible only to the authorized data owner. OpenAI Sites and Cloudflare infrastructure provide hosting, security and storage. Information may be provided to legally authorized authorities where an applicable obligation requires it. Form records are not automatically sent to AI models, IyziTrace or advertising services.

The hosting infrastructure may process data outside Türkiye; Türkiye-only storage is not promised. The conditions under Article 9 of Law No. 6698 also apply to international transfers. Ticking the notice acknowledgement does not itself provide a legal safeguard for such transfers.

Security and retention

Connections use HTTPS. Consulting records in the application database are additionally encrypted with AES-256-GCM; the key is not sent to your browser. Request content and phone numbers are not written to application error logs. Rate limits use derived digests of IP and contact information; active rate-limit records are cleaned on subsequent requests using a 24-hour window. The hosting provider may also keep its own security and access logs.

Requests that do not lead to paid work are reviewed for continued retention after 180 days. The data owner clears personal fields where the purpose has ended and retention is no longer required. Contract, payment, dispute or statutory records require a separate retention assessment. Provider backups and exported copies are also part of retention and deletion review; clearing the active record does not instantly delete those copies.

Your rights under Law No. 6698

You may ask whether your data is processed; request information about processing, purposes and recipients in Türkiye or abroad; request correction and, where conditions are met, erasure or destruction; request notification of corrections or erasure to recipients; object to an adverse outcome based solely on automated analysis; and seek compensation for damage caused by unlawful processing.

Send your request from the email address used in the form, including your request reference and the action you seek. Appropriate identity checks take place before disclosing anyone’s information. Requests under Law No. 6698 are concluded within 30 days; do not attach an identity document to your initial email.

Contact about your data