Privacy notice

This notice explains how Trio AI ("we", "us") handles personal data when you visit this website or contact us through it. We are based in Türkiye, so the Turkish Personal Data Protection Law No. 6698 ("KVKK") applies to everything we do. If you are in the European Economic Area, the United Kingdom or Switzerland, the General Data Protection Regulation ("GDPR") and its UK and Swiss equivalents also give you the rights described below.

Who is responsible for your data

The data controller is Trio AI.

You can reach us about anything in this notice through the contact form on this website.

What we collect

What you give us. When you fill in the contact form we receive your name, email address, phone number (optional), who you are (startup, solo founder or company), what you need, your budget range (optional), whether you would like to sign an NDA, and your message. If you write to us directly, by email or messaging app, we receive what you send and your contact details.

What is recorded automatically. When you visit the site, our hosting provider's servers record technical data, as on any website: your IP address, the date and time, the page requested and your browser details. These logs keep the site running and secure.

Cookies

This site does not use cookies and stores nothing in your browser. Fonts and images are served from our own server.

Viewing our pages sends no request to any third-party service, which is why there is no cookie banner.

Why we use your data, and on what legal basis

• To answer your enquiry and prepare a proposal. These are steps you ask us to take before entering into a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• To deliver the project if we work together. Performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• To keep the site secure and keep out spam. Our legitimate interest in running a safe website (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
• To meet legal obligations, for example tax and accounting records (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
• To establish, exercise or defend legal claims (GDPR Art. 6(1)(f); KVKK Art. 5(2)(e)).

We do not use your data for advertising, we do not sell it, and we do not make decisions about you based solely on automated processing.

Who we share it with

Only with the service providers we need to run the site and answer you, and only for those purposes:

• Resend (email delivery, United States): contact form messages reach us by email through Resend.
• Our hosting provider: serves the site and keeps the server logs described above.

We also disclose data to public authorities when the law requires it.

International transfers

We are in Türkiye, and some of our providers process data in the United States. When personal data leaves the country it was collected in, we transfer it only as the law allows: under KVKK Article 9, and for data covered by the GDPR, with appropriate safeguards such as the standard contractual clauses in our providers' data processing terms. You can ask us for details of the safeguards we rely on.

How long we keep it

• Enquiries: for as long as we need to answer and follow up on your request.
• If we work together: for the length of the contract, then for the retention periods required by Turkish commercial and tax law.
• Server logs: for the period set by our hosting provider.

After that, the data is deleted or anonymised.

Your rights

Depending on where you are, you have the right to:

• access the personal data we hold about you and get a copy of it,
• have inaccurate data corrected,
• have your data erased,
• restrict how we use it,
• receive it in a portable format,
• object to processing based on our legitimate interests,
• withdraw your consent at any time, where we rely on consent,
• complain to a supervisory authority: in the EEA, the authority in the country where you live or work; in the UK, the ICO; in Switzerland, the FDPIC; in Türkiye, the Personal Data Protection Board (KVKK).

To use any of these rights, write to us through the contact form on this website.

We answer within one month (30 days under KVKK). We may ask you to confirm your identity first.

Children

This website is meant for business enquiries and is not directed at anyone under 18. We do not knowingly collect data from children.

Security

Traffic to this site is encrypted with HTTPS. Only the team members handling your enquiry can read form messages. No transmission over the internet is completely secure, but we take reasonable technical and organisational measures to protect your data.

Links to other sites

This site links to app stores, our clients' websites and our browser games. Their own privacy policies apply when you visit them.

Changes to this notice

We may update this notice from time to time. The current version is always on this page, with the date of the last change at the top.