Privacy Policy

1. Data controller and contact

This policy explains how data is processed when you create an account, purchase packages and use learning or support services through ProgramYardım. Data controller and contact details:

2. Information we process

• Your name and email when registering, and a secure derived password hash instead of a recoverable plain-text password.
• When signing in with Google: the Google account identifier, name and verified email address. We do not receive your Google password.
• Payment form details: full name, email, phone and address; order contents, amount, payment reference, purchased packages, usage records from earlier versions and agreement acceptance records.
• For guest purchases: name, email and records associated with the package access code.
• Technical connection and transaction information for secure sessions, abuse prevention and error handling.
• Questions submitted to AI, optional photos or screenshots, recent text messages and the selected program are processed to generate responses.

3. Purposes, methods and legal bases

Information is collected electronically through site forms, Google sign-in, payment and order confirmations, and use of the service. Account and order management, package access, learning support and user requests are handled for entering into and performing the contract. Statutory records and notifications are based on relevant obligations; security and protection of rights rely on applicable legal bases. Any optional activity requiring explicit consent is presented separately with its purpose explained.

4. Service providers and transfers

Cloudflare services host the site and account records. Installation PDFs are stored in the server package and delivered after package access is verified. A private PDF store may hold additional files uploaded by the administrator. Google identity services are used if you choose Google sign-in. When configured, password reset emails are sent through Resend.

Payments through PayTR

When you choose payment, your full name, email, phone, address, connection IP address, order number, basket and amount are sent to PayTR for processing. Card details are entered in the payment form hosted by PayTR; ProgramYardım does not receive or store your card number, expiry date or security code. Payment result, reference, amount and test/live status are processed for order verification and delivery. Address and phone are stored encrypted on the server. PayTR provides its own privacy notices for its services.

AI chat on this site

When you press Send, your question, the selected program's name and official resources, up to the last six text messages and any image attached to that question are sent through our server to Cloudflare Workers AI. The reply appears on the site. Your name, email, password, payment details and account identifier are not automatically included in the model input. Information you type in your question or leave visible in an image forms part of the submitted content.

Images are resized and re-encoded in the browser before submission. The application does not write questions, images or answers to the D1 database, PDF store or a permanent chat record. Chat is held in the open page's memory and cleared when you start a new chat, leave the learning space or reload the page. Images from earlier questions are not included in subsequent requests. Error logs are limited to technical error codes and model names; the application does not add chat content to these logs.

The model runs on Cloudflare infrastructure. Cloudflare states that it does not use Workers AI customer content to train models or improve services without explicit permission. ProgramYardım does not add a setting granting that permission. See the Cloudflare Workers AI data-use notice for provider processing details. Google authentication is a sign-in option separate from AI chat.

AI use is optional; you do not need to submit a question to open official resources. Hide personal, sensitive and confidential information in screenshots before sending them. Answers may be incorrect.

Account and infrastructure services may include providers processing data abroad. Provider locations, transfer scope and the applicable legal mechanism must be completed according to the business's data-processing arrangements. Accepting account terms is not blanket consent to all international transfers.

Site language and package currency are selected automatically from the connection country identified by Cloudflare: Turkish/TRY for Turkey, Azerbaijan and Germany, and English/USD elsewhere. Precise device location is not requested. A private link provided to the administrator or the admin panel can enable English preview using a secure one-hour cookie. This cookie grants no purchase rights.

5. Cookies and device storage

Necessary cookies support account sessions, secure Google sign-in and order access. Program identifiers in your cart, the latest order number and a temporary key preventing duplicate orders are stored in the browser; clearing browser data may also clear the cart. Passwords and purchase permissions are not stored in the browser cart record. AI chat and a prepared image remain only in the open page's memory; chat content is not written to localStorage or sessionStorage. Submitted content is sent to the provider described above to generate a response. PayTR payment and security components load in the payment form. This version adds no advertising or visitor analytics tracking. Only the selected program identifier may be stored temporarily in session storage to return you to it after sign-in; questions and images are not included in that record.

6. Retention and security

Account and purchase information is retained as needed to provide service access; contract, payment and dispute records are retained according to legal requirements. Data no longer required is deleted, destroyed or appropriately anonymized. Security measures include authorization and private-file access controls. No internet service can guarantee absolute security.

7. Your rights and preferences

Use the contact channel above for requests for information, correction, legally applicable deletion or destruction, and other requests under Turkey's Personal Data Protection Law (KVKK). Proportionate information may be requested to verify your identity. The effect of closing your account on purchased packages will be explained before processing. Advertising consent is not required for an account; reading a privacy notice does not itself constitute consent.

This policy is updated and necessary notice is given when processing purposes or services change.