TR · ENSign inFree audit

Legal

Privacy Policy

This policy explains what information is processed through the Dexlera website and service and how it is used. Dexlera is operated by Erkan Ecom LLC, a Delaware limited liability company. Users in Türkiye should also read the KVKK Notice.

Last updated: 7 October 2026

1. Controller

Erkan Ecom LLC (a Delaware limited liability company), Wilmington, Delaware, USA. Email: [email protected]

2. Information we process

  • Account data: your email address; if you signed up with email, your password (stored only as a one-way hash, never in plain text).
  • Google sign-in data: your Google account identifier and verified email address.
  • Business information: website address, business name and description, measurement topics, competitors, languages and markets. Public pages of your website may be read for the measurement.
  • Data the service produces: measurement questions, AI answers, findings, actions, the records you enter for actions, and reports.
  • Subscription data: customer and subscription numbers, plan, subscription status, renewal and end dates as reported by Lemon Squeezy. Card details never reach Dexlera.
  • Session and security data: session and flow cookies (see the Cookie Notice), abuse-prevention records and technical request logs kept by the hosting infrastructure (e.g. IP address, time, requested address).

3. Google sign-in

Google sign-in requests only the openid, email and profile basic identity scopes. Of these, Dexlera uses your Google account identifier, your email address and the fact that it is verified, for authentication, verified account linking, account and session operation, and customer access control. Sign-in with an unverified Google email is refused.

Dexlera does not request access through this flow to Gmail, Google Drive, Google Calendar, contacts, files, messages or any other Google product data.

4. Purposes and legal bases

  • Creating and verifying your account and keeping a secure session; running the measurement you bought or started and providing results, actions and reports (performance of a contract; GDPR Art. 6(1)(b)).
  • Opening, keeping and closing your subscription based on Lemon Squeezy notifications (performance of a contract).
  • Service security, abuse prevention, error detection and backups (legitimate interests; GDPR Art. 6(1)(f)).
  • Account verification, password reset and service-related transactional emails (performance of a contract).
  • Meeting legal obligations and protecting rights (legal obligation and legitimate interests; GDPR Art. 6(1)(c) and (f)).

5. Service providers

To run the service, information is shared, limited to the purpose, with these service providers:

  • Railway: application hosting, database and file storage.
  • Google Cloud: storage of encrypted backup copies and management of encryption keys.
  • Google (Google sign-in): authentication, if you choose this method.
  • OpenAI and Google Gemini: asking measurement questions, receiving answers and deriving measurement topics from business information. Business information and measurement questions are sent to these providers; your account email and password are not.
  • Lemon Squeezy: payment, subscription, invoicing and tax handling (merchant of record). Card details are entered only at Lemon Squeezy and never reach Dexlera.
  • Resend: sending account verification, password reset and service-related transactional emails.

6. International transfers

Erkan Ecom LLC is established in the USA, and the servers of the providers above may be located outside Türkiye and the European Economic Area, including in the USA. Your information is therefore transferred to these countries. Transfers rely on the transfer mechanisms provided by applicable law.

7. Sale, advertising and sharing

We do not sell personal data. We do not sell Google identity information, use it for advertising targeting or share it for general marketing. The site uses no advertising or analytics (tracking) tools. Information is shared only with the providers above or, where legally required, with competent authorities.

8. Retention

Account, business and measurement data are kept while your account is open; measurement history is kept unchanged so results can be compared with earlier measurements. No fixed automatic deletion period is defined yet. You can ask for your account and data to be deleted by writing to the address below; the request is handled subject to legal obligations and security records. Short-lived session and flow records become invalid when they expire.

9. Security

Passwords are stored as one-way hashes, and stored measurement files and backups are encrypted; access is limited by authorisation. No internet or storage system can guarantee absolute security.

10. Your rights

You may have the right to access your personal data, to ask for it to be corrected, deleted or restricted, to object to processing and to receive your data in a portable form. Rights in Türkiye and how to apply are described in the KVKK Notice. If you are in the European Economic Area, you can complain to the data protection authority of your country. For requests: [email protected]

11. Children

Dexlera is a service for businesses and is not directed at anyone under 18.

12. Changes and contact

We may update this policy when the service or the law changes; the current version is published on this page. Questions: [email protected]