Privacy Policy

1. Introduction

DozzyWizard (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use dozzywizard.com and our API (“Service”).

DozzyWizard is operated from Istanbul, Turkey. This policy is prepared in compliance with the General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK — Kişisel Verilerin Korunması Kanunu, Law No. 6698).

By using the Service, you consent to the practices described in this policy.

2. Data Controller

DozzyWizard
Istanbul, Turkey
contact@dozzywizard.com

3. Data We Collect

We collect the following categories of personal data:

3.1 Account Data

• Name
• Email address
• Password (hashed, never stored in plain text)
• Authentication method (email/password or Google sign-in)
• Profile picture, if you upload one
• API keys you create (stored only as one-way hashes, never in plain text)

3.2 Usage Data

• Prompts, messages, and images submitted to and generated by the Service
• Requests and responses made through the API
• AI models selected and usage frequency
• Token consumption and the cost charged for each request

3.3 Payment Data

• Transaction records and billing history (processed via LemonSqueezy; we do not store full card details)

3.4 Technical Data

• IP address
• Browser type and version
• Device type and operating system

3.5 Communication Data

• Emails or messages you send to us

4. How We Use Your Data

We use your data for the following purposes:

4.1 Broad Data Use

We may use your data — including usage patterns, prompt patterns, and interaction data — for a wide range of purposes including but not limited to: product improvement, internal research, analytics, business intelligence, and AI or model development. We may also share or transfer such data to third parties or partners as described in Section 6.

We do not currently sell your personal data. However, we reserve the right to share or transfer aggregated, anonymized, or pseudonymized data, or in certain circumstances identifiable data, with third parties for commercial purposes in the future. If we begin doing so, we will update this policy and, where required, obtain your consent.

5. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the Service. Upon account deletion:

• Account data is deleted within 30 days.
• Usage logs may be retained in anonymized form for up to 2 years for analytical purposes.
• Payment records are retained as required by applicable financial and tax regulations.

6. Data Sharing and Transfers

We may share your data with:

• AI Model Providers — your prompts and inputs are transmitted to third-party AI model providers to generate responses. These providers have their own privacy policies.
• Payment Processors — LemonSqueezy processes payments on our behalf.
• Service Providers — hosting, storage, email delivery, security, and infrastructure providers acting as data processors.
• Business Partners — we may share usage data with trusted partners for analytics or product development purposes.
• Legal Authorities — if required by law, court order, or governmental authority in Turkey or applicable jurisdictions.
• Business Transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

Where data is transferred outside of Turkey or the European Economic Area (EEA), we take appropriate safeguards in accordance with KVKK and GDPR requirements.

7. Cookies and Local Storage

We use a strictly necessary session cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

Your browser's local storage is used to remember display preferences such as theme, font, and code theme on your device. This data stays on your device and is not sent to us.

8. Security

We implement industry-standard security measures including:

• HTTPS/TLS encryption for all data in transit
• Hashed password storage
• API keys stored only as one-way hashes
• Access controls and regular security reviews

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. Your Rights

Under GDPR (for EEA users):

• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw consent at any time

Under KVKK (for Turkish users):

• Right to learn whether personal data is being processed
• Right to request information about processing
• Right to learn the purpose of processing and whether it is used in accordance with its purpose
• Right to know third parties to whom data is transferred
• Right to request correction of incomplete or inaccurate data
• Right to request deletion or destruction of data
• Right to object to outcomes against you arising from automated processing
• Right to claim compensation for damages

To exercise any of these rights, contact us at: contact@dozzywizard.com

We will respond within 30 days (GDPR) or within the timeframe required by KVKK.

10. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the Service. Continued use of the Service after such changes constitutes your acceptance of the updated policy.

12. Contact

For privacy-related inquiries or to exercise your rights:

DozzyWizard
Istanbul, Turkey
contact@dozzywizard.com