Privacy notice

Last updated: [DATE]

Draft structure. Replace every [bracketed] item with text reviewed by your legal advisor before going live.

1. Who we are (data controller)

[Company legal name], [address], [tax / MERSİS number]. Contact: [privacy email].

2. What we collect

Account data: email address, name (optional), sign-in method. Resume content you enter, stored so you can edit and download it. Usage data, only if you allow analytics: pages viewed and actions taken in the product (for example “resume created”), device type and a random session ID. Usage data never includes the text of your resume.

3. Why we collect it (purpose and legal basis)

To provide the service you asked for (contract). To improve the product, only with your consent (analytics). To send tips and product news, only with your separate consent (marketing). [Add the KVKK Article 5/6 basis for each purpose.]

4. Where it is stored and who processes it

Google Firebase (Authentication, Cloud Firestore, Google Analytics) — [region]. [List any other processors.] Data may be transferred abroad: [state the KVKK Article 9 basis].

5. How long we keep it

Guest resumes: deleted after [30] days without activity. Account data and resumes: until you delete your account. Usage events: [400] days.

6. Your rights

You can download all your data and delete your account at any time from Account settings. Under KVKK Article 11 you may also [list rights] by writing to [privacy email].

7. Cookies and local storage

Necessary: keeping you signed in and remembering your choices. Analytics (optional): measuring product usage. You can change this at any time in Account settings or the cookie banner.