Privacy Policy
Draft text — legal review required before launch.
1. Scope
This Privacy Policy explains how ProfileLab ("ProfileLab", "we", "us") collects, uses, transfers, retains and protects personal data when you use the website and the profile presentation analysis service (the "Service"). By using the Service you acknowledge that you have read this Policy. Where processing is based on consent, we rely on the explicit consent you give through the checkboxes presented before analysis.
2. Data Controller
ProfileLab acts as the data controller for the personal data described in this Policy. Contact details for privacy requests are provided in Section 12.
3. Personal Data We Process
(a) Identity and contact data: your email address. (b) Visual data: the four profile photographs you upload. (c) Profile content: your optional bio text and selected dating goal. (d) Consent records: the consents you gave, with date and time. (e) Transaction data: payment status and order reference; card details are processed solely by our payment provider and are never received or stored by us. (f) Technical data: IP address, browser type and request logs generated automatically for security and fraud prevention. We do not intentionally collect special categories of personal data. The Service does not perform biometric identification and does not assess attractiveness, ethnicity, health or any other sensitive characteristic.
4. Purposes of Processing
We process personal data only to: (i) analyze the presentation quality of your dating profile using artificial intelligence; (ii) display a free preview of the results; (iii) process a one-time payment; (iv) generate and deliver your full report and shareable story image to your email address; (v) send a single follow-up message with a discount code where you did not complete a purchase, provided that applicable law permits it; (vi) maintain security, prevent abuse and fraud; and (vii) comply with legal obligations.
5. Legal Bases
Processing is based on: your explicit consent (AI analysis, international transfer, follow-up message); the performance of a contract with you (delivery of a purchased report); our legal obligations (accounting and tax records); and our legitimate interests in securing the Service, where these are not overridden by your rights.
6. Artificial Intelligence Processing
Your photos and bio are transmitted to a third-party AI service provider solely for the purpose of generating the analysis. The provider acts on our instructions as a data processor and is not permitted to use your content to train its models. AI output is automated and may contain inaccuracies; it constitutes general guidance only and produces no legal or similarly significant effect on you.
7. Retention and Deletion
Photos are retained only for as long as strictly necessary to complete processing. If you purchase, photos are permanently deleted immediately after your report has been sent to your email. If you do not purchase, photos, bio and preview results are automatically and permanently deleted within fifteen (15) minutes of upload. Full reports are not stored on our systems; they are generated and delivered directly to your email. Your email address and consent records are kept for as long as necessary to demonstrate compliance and to honor your requests, and in any event no longer than permitted by law. Transaction records are retained for the periods required by applicable tax and commercial legislation.
8. Sharing and Transfers
We share personal data only with service providers that are necessary to operate the Service: cloud hosting and storage, the AI analysis provider, the payment provider and the email delivery provider. Some of these providers are located outside Türkiye and outside your country of residence. Such transfers are carried out on the basis of your explicit consent and/or appropriate safeguards required by applicable law. We do not sell personal data and do not share it with advertisers.
9. Security
We apply appropriate technical and organizational measures, including encrypted connections (TLS), private storage with restricted access, removal of photo metadata (EXIF) before storage, automated deletion and access controls on our servers. No method of transmission or storage is completely secure; however, we work to protect your data against unauthorized access, loss or alteration.
10. Your Rights
Subject to applicable law (including KVKK and, where applicable, the GDPR), you have the right to: learn whether your personal data is processed; request information about processing; learn the purpose of processing and whether data is used accordingly; know the third parties to whom data is transferred; request rectification of incomplete or inaccurate data; request erasure or destruction; object to outcomes arising from exclusively automated analysis; withdraw consent at any time without affecting the lawfulness of prior processing; and claim compensation for damages arising from unlawful processing. You may also lodge a complaint with the competent data protection authority.
11. Children
The Service is intended exclusively for persons aged 18 and over. We do not knowingly process data of minors. If we become aware that a minor has used the Service, the related data will be deleted without delay.
12. Contact and Changes
You may submit requests regarding your personal data by email to the address stated on our website. We will respond within thirty (30) days at the latest. We may update this Policy from time to time; the current version is always published on this page with its effective date.