Legal & Security
Privacy Policy
How we process data when you use Simit GPT, for what purpose and on what basis.
This policy explains how Simit GPT ("Simit", "we") processes personal data when you use the service, in line with Türkiye's Personal Data Protection Law No. 6698 ("KVKK") and generally accepted privacy principles.
1. Data controller
Simit GPT. Contact: info@cmtedu.com
2. Data we process
| Data | Description |
|---|---|
| Message content | The messages you write and earlier turns of the conversation are processed to generate an answer. |
| Technical data | IP address, browser details, request times and error logs, for security and abuse prevention. Message content is not written to server logs. |
| Account data | If you sign up: your name, email, phone number and an irreversible hash of your password. Your password is never stored in plain text. |
| Chats | Members' chats and folders are stored on our servers so we can provide the service and you can access them from your account. Guest chats stay in your browser only. |
| Usage records | Records such as message counts and token amounts, used to apply usage limits. |
| Payment data | Payments are processed by iyzico; your card details never reach our servers. |
Please don't include sensitive personal data (national ID numbers, health information, etc.) in your messages.
3. Purposes and legal bases
- Providing the service and generating answers: performance of a contract (KVKK Art. 5/2-c)
- Information security and preventing abuse and attacks: legitimate interest (Art. 5/2-f)
- Complying with legal obligations: Art. 5/2-ç
4. Transfers, including abroad
During the beta, answers are generated with models from third-party AI infrastructure providers located abroad (ready-made API models). This means your message content is transferred to these providers abroad in order to generate answers. Transfers are carried out in accordance with Article 9 of the KVKK. The provider's own policies govern its processing.
Once our own model, Simit-TR, is live, requests it answers will be processed on our own infrastructure without being transferred abroad.
Data may also be shared with our hosting and infrastructure suppliers only as needed to provide the service, and with competent authorities where legally required.
5. Model training
Your conversations are not used to train Simit models without your explicit, separate consent. No conversations are stored for training during the beta. Details: Responsible Data
6. Retention
Technical logs are kept for at most 30 days and then deleted. Account and chat data are kept while your account is open; you can delete chats at any time and request deletion of your account.
7. Cookies
Simit GPT does not use advertising or tracking cookies. Only browser storage needed for the service to work (theme, language, chat history) is used.
8. Your rights (KVKK Art. 11)
You have the right to learn whether your data is processed, request information, ask for correction or deletion, know the third parties it was transferred to, object, and claim compensation for damages. Send requests to info@cmtedu.com; we respond within 30 days at the latest.
9. Changes
We may update this policy. We will announce significant changes on this page.