LEGAL
Explicit Consent for Data Processing (KVKK)
Last updated: March 1, 2026
Pursuant to KVKK Board Decision 2018/90
1. Data Controller
PrimaSpec ("we", "us", or "our") is the data controller responsible for processing your personal data under the Turkish Personal Data Protection Law No. 6698 ("KVKK").
Contact: [email protected]
2. Consent Scope
By using PrimaSpec, you provide your explicit consent for the following data processing activities:
- Personal data processing: Processing of your personal data (email address, name, IP address, usage data) for the purpose of providing and operating the PrimaSpec service
- AI data transfer: Transfer of your project descriptions, conversation messages, and related content to Anthropic (located in the United States) for the purpose of AI-powered specification generation
- Billing data transfer: Transfer of your billing and transaction data to Coda Payments for the purpose of payment processing, invoicing, and fraud prevention
- Cross-border data transfers: Transfer of your personal data to service providers located outside of Turkey, with appropriate safeguards including Standard Contractual Clauses (SCCs) in place
3. Processing Purposes
Your personal data is processed for the following specific purposes:
- Service delivery: Operating the PrimaSpec platform, managing your account, authenticating your identity, and providing access to features
- AI specification generation: Sending your project content to AI models to generate technical architecture specifications, governance files, and related documents
- Payment processing: Managing credit purchases and maintaining transaction and billing records
- Account communication: Sending transactional messages including receipts, security alerts, and service notifications
4. Consent Withdrawal
You may withdraw your consent at any time by contacting us at [email protected].
Important: Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. However, withdrawal may result in the inability to use the Service or certain features, as the processing activities described above are necessary for the operation of PrimaSpec.
5. Retention
Your personal data is retained in accordance with the retention periods described in our KVKK Transparency Notice (Section 6). In summary, account and project data is retained for the duration of your account plus 30 days, billing records for 10 years per Turkish Commercial Code, and consent records for 5 years.
6. Your Rights
Under KVKK Article 11, you have the right to:
- Learn whether your personal data is being processed
- Request information about the processing
- Learn the purpose of processing
- Know the third parties to whom your data has been transferred
- Request correction of incomplete or inaccurate data
- Request deletion or destruction of your data
- Object to results arising from automated data analysis
- Claim compensation for damages from unlawful processing
For full details on your rights and how to exercise them, please refer to our KVKK Transparency Notice (Section 7).
7. Related Documents
- KVKK Transparency Notice — Full transparency notice pursuant to KVKK Article 10
- Privacy Policy — Comprehensive privacy policy covering all jurisdictions