Privacy & data use
This page is both our privacy policy and our disclosure notice under the Turkish Personal Data Protection Law (KVKK, Law No. 6698). Account, payment, and support job records stay linked to your identity. For model training we may keep a separate store of rows with no email, no task ID, and no user hash. Your email is not written into training exports.
Data controller
For KVKK purposes, the data controller for the service offered under the CADAGEN brand is Abdullah Hamzaoğlu, operating as a sole proprietor prior to incorporation. For questions about the data controller and KVKK requests, use destek@cadagen.com or the Contact page. Requests are answered within statutory deadlines (as a rule within 30 days).
Categories of personal data we process
Account details (email address, sign-in records), your design prompt (text), optional images, generation script, STEP/STL outputs, retry history (errors and fixes), credit/transaction records, optional feedback (thumbs up/down, structured reason chips, optional note), your cookie/analytics preference, and basic technical records needed to run the service (e.g. error logs). Do not include personal data in free-text notes.
Purposes of processing
Your data is processed to: provide the service (CAD file generation, preview, download), manage your account and credit balance, run payment and billing processes, respond to support requests, detect and fix errors, prevent abuse, and — via identity-free training rows — improve service quality (including future model improvement).
Collection method and legal basis
Data is collected electronically while you use the service (sign-up, design studio, support channels), by automated or partly automated means. Legal bases under KVKK art. 5: performance of a contract (providing the service, billing), compliance with legal obligations, and legitimate interest (security, error fixing, abuse prevention, proportionate product improvement). Non-essential analytics cookies and marketing emails rely on your explicit consent.
Who your data may be shared with
Only to the extent needed to run the service, your data may be shared with: the payment provider (Creem; card data never reaches CADAGEN), authentication (Firebase Auth), cloud hosting and database providers, AI model API providers (only to process your design prompt via a model gateway), optional analytics/error monitoring (only with your cookie preference), and legally authorized authorities. Some of these providers host servers abroad; such transfers are handled under KVKK art. 9 (adequacy decision, standard contractual clauses, or other appropriate safeguards).
Retention periods
Account data is kept while your account is active; transaction and billing records are kept for the retention/limitation periods required by applicable law. Preview files (e.g. GLB) are kept for a short time. Identity-free training rows (no email / task ID / user hash) may be kept longer where they no longer qualify as personal data. On a deletion request, personal data and training rows are deleted or anonymized as far as possible within a reasonable time (as a rule 30 days).
What we do not export / store
The training store does not write email, task ID, or a user hash; rows use a random training ID. Feedback records do not store your email. Payment card data is not stored on CADAGEN servers (payments go through Creem).
Training data and model improvement
Identity-free, filtered records (prompt + generation script) may later be used to fine-tune our CAD models. This is a purpose separate from delivering the core service; under the KVKK generative-AI guidance, simply using the service does not automatically cover training. Marking bad results with feedback helps us learn what quality means. To opt out, turn on the preference under Dashboard → Privacy (existing training rows are deleted too) or email destek@cadagen.com.
Cookies and analytics
Cookies strictly necessary for the site to work (session, language, security) may be used without consent. Performance/analytics tools (e.g. Plausible, PostHog) and similar non-essential tracking load only if you choose Accept on the cookie banner. If you Reject, those tools are not loaded. We store your choice in the browser; clear site data or contact us to change it.
Your rights (KVKK art. 11) and how to apply
For rights under KVKK art. 11 (access, correction, deletion, transfer information, objection, etc.), use destek@cadagen.com or the Contact page. If signed in, you can also set training opt-out and request account deletion under Privacy on the Dashboard. Requests are answered within statutory deadlines.
Account support & admin access
Support staff may access your email, credit balance, and related task records to provide support, apply manual credit adjustments, and investigate issues. The content-review screen does not show email; a task ID can still be linked to your account (pseudonymization). Each such action is recorded in an internal audit log (who, when, reason). We do not use this data for marketing without separate consent.
Last updated: July 2026
Start designing