Privacy Policy

1. Data we collect

• Account details: name, email address, password (stored only in hashed form by our authentication provider), phone number and office name.
• Content you upload: property photos, logo and portrait, listing details, portfolio notes and writing-style samples. Photos may show people, number plates or personal belongings.
• Content you create: edited images, videos, listing copy, brochures, social images and listing pages.
• Listing-page enquiries: the name, phone/email and message entered by people who contact you through your listing page.
• Subscription and payment records: plan, period, amount and payment status. We never receive your card details; web payments are processed by Polar and iOS payments by Apple.
• Usage records: which features you use and when, generation cost and error logs (to run the service, enforce quotas and prevent abuse).
• Technical data: session cookies, language preference and IP address for security.

2. How we use data

We do not use your data for advertising, we do not sell it and we do not track you across apps or websites. We use no third-party advertising or analytics tools.

• To create your account and keep you signed in.
• To produce the image edits, listing copy, videos and other outputs you request.
• To manage your subscription, credits and allowances.
• To forward enquiries from your listing pages to you.
• To keep the service secure, fix errors and prevent abuse.

3. AI providers

Image editing, listing copy and video generation are performed by third-party AI providers. When you use a feature, the relevant photos, listing details, portfolio notes and writing samples are sent to the provider solely to produce that output. We ask for your explicit consent in the app before this happens, and you can withdraw it at any time from the Account screen. Without consent, AI features won't run and you can keep using your account.

• OpenAI (USA): photo analysis, image editing, listing copy, video direction.
• Higgsfield: image and video generation.
• Kling / Kuaishou (Singapore endpoint): video generation.

4. Other service providers

These providers process data only on our behalf to deliver the service and are required to protect it to a standard equivalent to this policy. We share data with no one else unless the law requires it.

• Supabase (European Union): database, authentication and file storage.
• Vercel (EU region): application hosting.
• Polar: web payments (Merchant of Record) and invoicing.
• Apple: in-app purchases in the iOS app.
• Resend: emailing listing-page enquiries to you.
• Meta (web only, if you connect your account): content you choose to publish to Instagram/Facebook.

5. International transfers

Your data is hosted in the European Union. AI and some service providers process data outside Türkiye, including in the USA and Singapore. These transfers rely on the explicit consent you give in the app and on the safeguards required by applicable law.

6. Retention and deletion

• We keep your data while your account is open. Original photos are kept for 6–24 months depending on your plan.
• You can delete your account at any time from "Delete account" on the Account screen. Your account, profile, listings, every file you uploaded or created, your listing pages and enquiries are permanently deleted immediately, and any active web subscription is ended.
• Usage and cost records that are no longer linked to you (anonymised) may be kept for statistics and security. Invoices for web payments are kept by Polar where the law requires it.
• App Store subscriptions are managed by Apple; deleting your account does not cancel an Apple subscription — use your App Store account settings to cancel.

7. Your rights

Under Turkish data-protection law (KVKK Art. 11) and, where applicable, the GDPR, you can access your data, ask for it to be corrected or deleted, object to processing, withdraw consent and request a copy. You can correct profile details and delete your account from the Account screen. For anything else, email us.

8. Security

Data is encrypted in transit (HTTPS). Files are kept in private storage and shown to you only through short-lived signed links. Database access is restricted so each user can reach only their own data.

9. Children

Elvora Vision is a business app for real-estate professionals and is not directed at anyone under 18.

10. Changes and contact

When we update this policy the date below changes; if our AI providers or the types of data shared change, we will ask for your consent again.

Questions and requests: merhaba@elvoravision.com