Privacy Policy

1. Introduction and Scope

At Valdoro, we value your privacy. This privacy policy explains how we collect, use, store and protect your personal data. This policy has been prepared in accordance with the Personal Data Protection Law No. 6698 (KVKK) and the European Union General Data Protection Regulation (GDPR).

By using our service, you agree to this policy. If you do not agree to the policy, please do not use our platform.

2. Data Controller

3. Personal Data We Collect

We collect the following personal data to provide our services:

3.1 Identity and Contact Information

• Full Name: For account creation and personalization
• Email Address: For account verification, communication and notifications
• Password: For account security (stored encrypted)

3.2 Dream and Content Data

• Dream Records: Dream content in text and audio format
• Emotion Data: Emotions felt in dreams
• Date and Time Information: Dream recording times
• Lucid Dream Markings: Conscious dream experiences
• Tags and Categories: User-added classifications

3.3 Usage and Technical Data

• IP Address: For security and location detection
• Browser Information: For compatibility and optimization
• Device Information: For mobile/desktop compatibility
• Usage Statistics: Feature usage, session durations
• Cookie Data: For session management and preferences

3.4 Payment and Subscription Information

• Payment Information: Credit card information (processed through secure payment providers, not stored by us)
• Billing Information: Name, address, tax number (optional)
• Subscription Status: Plan type, start/end dates
• Transaction History: Payment records and invoices

4. Purposes of Data Processing

We process the personal data we collect for the following purposes:

• Service Provision: To provide dream journal, analysis and lucid dream features
• AI Analysis: To analyze and interpret your dreams with artificial intelligence
• Personalization: To provide personalized insights and recommendations
• Communication: To provide account notifications, updates and support
• Security: Account security and fraud prevention
• Payment Processing: To manage subscription payments
• Legal Obligations: To fulfill legal requirements
• Service Development: To improve platform performance (with anonymous data)

5. Data Security Measures

The security of your data is our highest priority. Security measures we take:

• Encryption: All data is encrypted to AES-256 standard
• HTTPS Protocol: All data transmission is secured with SSL/TLS
• Firewall: Multi-layered protection against unauthorized access
• Regular Audits: Periodic tests for security vulnerabilities
• Access Control: Limited staff access and authorization system
• Backup: Regular data backup and disaster recovery plan
• Two-Factor Authentication: Additional security layer (optional)

6. Data Sharing and Transfer

Important: Your dream content and personal data are never shared with or sold to third parties for marketing or advertising purposes.

6.1 Limited Sharing Situations

We may share your data only in the following situations and with strict confidentiality agreements:

• Service Providers: Payment processing (Stripe, iyzico), hosting (Supabase), email service
• Legal Requirements: In case of court order, legal request or public safety
• Business Transfer: In case of company merger, acquisition or asset transfer

6.2 International Data Transfer

Your data is stored on European Union servers. If data transfer outside the EU is required, protection measures compliant with GDPR standards (Standard Contractual Clauses) are applied.

7. AI and Dream Analysis Privacy

Your privacy is protected in our AI-powered dream analysis service:

• Your dream data is used only to provide analysis specific to you
• Your dream content is not used to train AI models
• Analyses are performed in real-time and processed temporarily
• AI analysis results are stored only in your account
• Your dream data is never shared with other users

8. Cookies and Tracking Technologies

Our platform uses cookies for the following purposes:

8.1 Cookie Types

• Essential Cookies: Session management, security (cannot be disabled)
• Functional Cookies: Language preference, theme settings
• Analytics Cookies: Platform usage statistics (anonymous)
• Performance Cookies: Page load speed optimization

8.2 Cookie Management

You can manage, delete or block cookies from your browser settings. However, if you disable essential cookies, some features may not work.

9. Data Retention Periods

We store your personal data only as long as necessary:

9.1 Active Accounts

• Account Information: As long as the account is active
• Dream Records: Actively for the last 30 days, then archived for 90 days
• Monthly Reports: Sent by email, stored in system for 12 months
• Payment Records: 10 years due to legal obligation

9.2 After Account Deletion

• When you delete your account, all dream data is permanently deleted within 30 days
• Personal information (name, email) is deleted within 30 days
• Payment records are kept for 10 years due to legal obligation (anonymized)
• Anonymous usage statistics may be retained for research purposes

9.3 Automatic Data Cleanup

To optimize system performance, dream records older than 30 days are automatically archived at the end of each month. Archived data is kept for 90 days for restoration, then permanently deleted. Monthly report is sent by email.

10. Your Rights Under KVKK and GDPR

You have the following rights under the Personal Data Protection Law (KVKK) and GDPR:

• Right to Information: Learning which of your data is being processed
• Right of Access: Requesting access to and a copy of your data
• Right to Rectification: Requesting correction of incorrect or incomplete data
• Right to Erasure: Requesting deletion of your data ("right to be forgotten")
• Right to Portability: Downloading your data in a structured format
• Right to Object: Objecting to data processing
• Right to Restriction: Requesting restriction of data processing
• Right to Complain: Applying to the Personal Data Protection Authority

10.1 How to Exercise Your Rights

You can apply to exercise your KVKK rights through the following methods:

• Email: valdorobilinc@hotmail.com
• Written Application: Kırıkkale Yahşihan Mora 175
• Account Settings: Data download and deletion via Dashboard

Your applications will be answered within 30 days at the latest. Identity verification may be required.

11. Children's Privacy

Our service is not intended for children under 13:

• We do not knowingly collect data from children under 13
• Parental consent is recommended for users aged 13-18
• If you think your child has provided us with information, please contact us
• Detected child accounts are immediately deleted

12. Data Breach Notification

In the event of a possible data breach:

• The Personal Data Protection Authority is notified within 72 hours of breach detection
• Affected users are immediately notified by email
• The scope of the breach, affected data and measures taken are disclosed
• Necessary security measures are quickly implemented

13. Policy Changes

We may update this privacy policy from time to time:

• Important changes will be notified by email
• Updated policy takes effect on the date it is published
• The last update date is indicated at the top of the page
• We recommend checking regularly for changes

14. Contact and Data Protection Officer