This is an early draft, not an approved legal text. We are not legal counsel, and this page needs review by a lawyer specialising in KVKK before it can be adopted — especially since the agency is not yet registered as a legal entity, which Turkish law requires for an unambiguous identification of the "data controller".
Who is responsible for your data
LensOne AI, founded 2026 in Istanbul. The legal entity is being registered — this section will be completed with the company's official name and address once registration is complete, as the law requires.
What we actually collect today
—Account: your name, email, and a hashed password — never stored in plain text.
—Application: your location, portfolio link, a short note about your work, and two timestamps for your consent to the terms and to data processing.
—Uploaded media: the file itself, and its EXIF metadata — camera model, capture date, and GPS location if the file carries it.
—A session cookie, to keep you signed in, and a cookie for your language preference.
—Who you follow. Following is not anonymous: the photographer sees the name on your account, and nothing else about you.
—Your saved topics and your report settings. We email you about them only when you press “Send me a report now”, or turn on the daily or weekly summary yourself.
—Sign-ins: the time of every sign-in to your account and every failed attempt, whether it came from the website or the app, and an approximate country and city worked out from your connection address. The address itself is not stored. Only administrators see this record, and we keep it to protect your account.
—Searches that find nothing: when a search on the site returns no results, we keep the words, their language and the time — no name, no connection address, nothing that links them to you — so our editors know what people look for that we don’t have yet. Anything that looks like an email, a phone number or a link is never kept. These are deleted after 90 days.
What we deliberately avoid: no payment processor is connected yet, so no payment data is collected; no ad tracking; no third-party analytics on the site.
Approximate location uses IP geolocation data by DB-IP
Why we collect it
To run and authenticate your account, to review your application and uploaded media, to display it correctly attributed to you, and to reach you when needed.
Who can access it internally
Only the review team can see your full metadata. The public frame page never shows GPS coordinates or the original file's link — both are explicitly excluded from every public response. We do not sell your data, and have not shared it with any third party to date.
The safety of your location
GPS coordinates in a file you shot in a conflict zone can reveal a sensitive location. So: the preview every visitor sees is stripped of all metadata before publication, and the archived file stays inside the system with no link built to it on any public page.
Cookies and local storage
The session cookie (not reachable by the browser directly) and the language cookie are stored on your device. Your selections in the licensing tray and your light/dark theme preference live only in your device's localStorage — they never reach us.
Your rights under KVKK (Article 11)
You have the right to:
01Learn whether your data is being processed
02Request information about it
03Learn the purpose of its processing
04Know the parties it is transferred to, in Türkiye or abroad
05Request correction of anything inaccurate or incomplete
06Request its deletion or destruction
07Request that any correction or deletion be reported to parties it was transferred to
08Object to an outcome produced solely by automated analysis that works against you
09Seek compensation for damage caused by processing that violates the law
How to exercise your rights
Write to us — the same address on the contact page.