Privacy Policy

[COMPANY LEGAL NAME]([address], Türkiye) acts as data controller under Turkey's Personal Data Protection Law no. 6698 ("KVKK") and the EU General Data Protection Regulation ("GDPR"). Contact: privacy@moodel.co.

• Account: name, email, username, hashed password, year of birth
• Profile: photos, video, measurements, location, social links, bio
• Billing: invoice name/address (card data is stored at PayTR, not by us)
• Communications: support tickets, messages, emails
• Technical: IP, browser, device type, session cookies
• Usage: page views, clicks, profile visit counts (aggregated/anonymous)

• Performance of contract: account, profile publication, payments, booking
• Legal obligation: invoicing, tax compliance
• Legitimate interest: security, fraud prevention, product improvement
• Consent: marketing emails, optional analytics cookies

We work with the following processors to provide the service:

• PayTR (Türkiye): payment processing — card data is stored only at PayTR
• SMTP / email provider: transactional and notification emails
• Hosting / CDN provider: content storage and delivery (contact us about regional preferences)

We do not sell or rent your data to third parties for marketing.

• Active account data: for the lifetime of the account
• After account closure: deleted within 30 days
• Invoices and financial records: 10 years (Turkish Tax Procedure Law)
• Communication logs: 2 years

Three types of cookies are used:

• Strictly necessary: session, CSRF, language preference (no consent required)
• Functional: UI preferences (optional)
• Analytics (optional): aggregated visitor statistics (with explicit consent)

You can change cookie preferences at any time in your browser.

• HTTPS/TLS encrypted transport
• Passwords hashed with bcrypt
• Regular security updates and backups
• Role-based access control
• Suspicious activity monitoring and rate limiting

Under KVKK art. 11 and GDPR you have the right to:

• Learn whether your data is being processed
• Access processed data
• Request correction of inaccurate or incomplete data
• Request erasure where conditions are met
• Object to or restrict processing
• Receive your data in a portable format

Requests: privacy@moodel.co. We respond within 30 days at the latest.

Users under 18 may only register with the explicit consent of a legal guardian. Accounts found to be opened without consent are closed immediately and data is deleted.

This policy may be updated. Material changes will be notified by email; the current version is always available on this page.