Privacy notice

Who we are

Alvara AI is the data controller. For any question or request about this notice, email info@alvaraai.com

Data we process

• Account data: name, email address, workspace and team membership, plan and payment records.
• The website you analyze: the web address you enter, the public content we read from that site and the customer profile we derive from it.
• Business data on companies and people: company details from public records (company websites, the trade registry) and data providers, plus the name, job title, work email and company phone of people who work there, with the source and date saved for every field.
• Campaign data: the work email addresses of campaign recipients, the emails sent, and sending events such as deliveries, opens, clicks, replies and bounces.
• Suppression list: email addresses that unsubscribed, complained or hard-bounced.
• Technical logs: IP address, browser details, request and error logs.
• Early access request: when you write to us by email, your name and email address (as shown in the sender details of the email), your message and the web address you include, if any.

How we collect it

We collect data electronically and automatically: from sign-up and in-app forms, from the website you ask us to analyze, from public records and data providers, and from events reported by our email sending service. For an early access request, you send us the data by email.

Purposes and legal bases

• Opening your account, providing the service and billing you: performance of a contract (KVKK Art. 5(2)(c)).
• Compiling business data on companies and people into lead lists: data made public by the person concerned (Art. 5(2)(d)) and our legitimate interest (Art. 5(2)(f)).
• Keeping the suppression list and meeting obligations under commercial electronic messaging and tax law: express provision of law and legal obligation (Art. 5(2)(a) and (ç)).
• Securing the service, preventing abuse and fixing errors: our legitimate interest (Art. 5(2)(f)).
• Protecting our rights in legal disputes: establishing, exercising or defending a right (Art. 5(2)(e)).
• Reviewing and answering your early access request and opening access to you: steps taken at your request before a contract is formed (Art. 5(2)(c); Art. 5(2)(f) when you write on behalf of a company).

Who we share it with

We share data with our service providers only as far as running the service requires: cloud hosting and database, email sending and verification, email routing and inbox, company and contact data providers, web search and AI (language model) services, and payment processing. Some of these providers run infrastructure outside Türkiye; those transfers follow Article 9 of the KVKK. We disclose data to public authorities only where the law requires it.

How long we keep it

We keep data for as long as the purpose we process it for continues. Once that purpose ends and any legal retention period has passed, the data is deleted or anonymized. Some data has a set period:

• Addresses on the suppression list are kept indefinitely, so that campaigns don't email them again.
• Export files are deleted after 7 days.
• Raw event notifications (webhooks) from our email sending service are kept for 30 days.
• Personal data that has been deleted stays in encrypted backups for up to 37 days; the backups are then deleted automatically.

Your rights under Article 11

You have the right to:

• find out whether your personal data is processed,
• request information about that processing,
• learn why it is processed and whether it is used for that purpose,
• know the third parties in Türkiye or abroad it is transferred to,
• have it corrected if it is incomplete or inaccurate,
• have it erased or destroyed under the conditions in Article 7 of the KVKK,
• have any correction, erasure or destruction passed on to the third parties who received it,
• object to an outcome against you that results solely from automated analysis,
• claim compensation for damage caused by unlawful processing.

How to make a request

Email your request to info@alvaraai.com with your name and what you're asking for. You can also write to us if your work details appear in lead lists: you can ask us to erase your contact details or to stop email going to your address. We respond free of charge within 30 days, as Article 13 of the KVKK requires.