Privacy Policy

Last updated: 21 October 2026

This policy explains which data we process when you use Kitisel (https://kitisel.com), why, who we share it with and what your rights are. Kitisel is provided by Artisel Tech. Users in Türkiye can find additional information in the KVKK Privacy Notice.

Data we collect

• Account data: name, email address, an irreversible hash of your password (we never store the password itself), your Google account ID if you sign in with Google, language and theme preferences.
• Your site and content: the site address you add, information we crawl from your site's public pages, your brand profile, topic plan, and the articles we generate and you edit.
• Connection data: access details you provide when you connect your site (WordPress, Ghost, Shopify, Webflow, Wix, webhook) or Google Search Console. They are stored encrypted and are never sent back to your browser.
• Search Console data: once connected, your site's Google search performance (queries, pages, clicks, impressions, position).
• Usage and security logs: sign-in times, IP address, browser details, important actions (for example adding a site connection), error logs.
• Free analysis: the site address you enter and, if you choose, your email address. To prevent abuse we store an irreversible hash of your IP address, not the address itself.
• Payments: your billing details (name or company name, address, country, phone, tax or ID number, tax office) and payment records (plan, amount, date, order number). Card details are processed directly by the payment institution PayTR; we never see or store your card number. For bank transfers, we use the sender details shown on our bank statement to match your payment.

Why we process data

• To create your account, let you sign in and provide the service (performance of a contract).
• To analyze your site, suggest topics, write articles, publish them on your site with your approval and report results.
• To keep the service secure and prevent abuse and fraud (legitimate interest).
• To meet legal obligations (for example invoices and accounting records).
• To send product news, only if you opted in. You can withdraw this consent at any time.

AI service

We use Google LLC's Gemini API for article writing, topic suggestions and analysis. Public information crawled from your site, your brand profile and article content are sent to it. During the beta we use the free tier of the Gemini API. Under Google's terms, data sent on this tier may be used by Google to improve its products and may be reviewed by humans. Please don't put personal or confidential information in your brand profile or articles. We will update this section when we move to the paid tier.

Who we share data with

We don't sell your data or share it for advertising. We work with these service providers (sub-processors) to run the service:

• Google LLC (USA): Gemini API (AI), Sign in with Google, Search Console API and, if you agree, Google Analytics (visit statistics on marketing pages).
• Hosting provider: [Proveedor de alojamiento]. Servers, database and backups are kept here.
• Email delivery service: verification, password reset and notification emails.
• PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. (PayTR): card payment processing (your name, email, phone, address, IP address and the amount are sent to PayTR).
• Cloudflare, Inc.: bot check (Turnstile) on the free analysis form, if enabled.
• DataForSEO: keyword volume and difficulty data. Only keywords are sent, no personal data.
• Sites you connect: articles are sent to your site with your approval or according to the automatic publishing setting you chose.

We may share data with authorities when legally required (court order, request of a competent authority).

International transfers

Some providers are located outside Türkiye and the European Economic Area (for example in the USA). For these transfers we rely on the safeguards required by applicable law (for example standard contractual clauses).

How long we keep data

• Account and content data are kept while your account is open. When you ask us to delete your account, your data is deleted within 30 days; records we must keep by law (for example invoices) are kept for the required period.
• Security and activity logs are kept as long as needed for security and possible disputes.
• When you remove a connection, its access details are deleted immediately.

Security

Connection details are encrypted with AES-256-GCM. Passwords are hashed with argon2id. Traffic is encrypted with HTTPS. Access is role-based and each organization's data is kept separate. No system is perfect; if a breach happens, we will inform you and, where required, the competent authority within the legal deadlines.

Cookies

We use cookies the service needs to work and, only if you agree, Google Analytics cookies on marketing pages. Details: Cookie Policy.

Your rights

You have the right to access, correct and delete your data, to object to processing, to receive your data in a portable format and to withdraw consent. For rights under Turkish law see the KVKK Privacy Notice. Send requests to info@artiseltech.com. If you are in the European Economic Area you can also complain to your local data protection authority.

Children

The service is for businesses; we don't allow people under 18 to create accounts.

Changes

We may update this policy. We will announce important changes by email or in the app. The current version is always on this page.

Contact

Artisel Tech, Akhisar/Manisa. Email: info@artiseltech.com. Phone: +905453222230.