Legal
Privacy Policy
Last updated: October 2026
1. What we collect
Depending on how you use the Service, we process: identity and contact data (name, work email, company, phone if you provide one, and the details you share when requesting access or a tenant); tenant and API usage data (tenant configuration, slug, API key usage metrics, quota and request-rate records, support tickets); security and technical data (IP addresses, server and access logs, HTTP status codes, error reports, browser/device information, session and security cookie records); and AI interaction data — the messages, prompts and system instructions you send through your Nefin endpoints, with the technical responses and telemetry that come back. We do not require or store your CLI provider password.
2. What we don't do
We don't sell your data and we don't pass it to third parties for commercial or advertising purposes. We don't use the content of your API requests to train models. We don't share your tenant's data with other customers — tenant isolation is architectural, not a policy promise layered on top. The Service is not designed to handle special categories of personal data (such as health or biometric data), and we don't ask for them.
3. How we use it and why
To provision and operate your tenant environment and open and verify accounts (performance of our agreement with you); to route your requests to the AI provider you chose and return the response; to keep logs, detect abuse and secure the Service (legal obligations and our legitimate interest in security and reliability); to respond to support requests and send account-related communications; and to comply with lawful requests from authorities or to establish, exercise or defend legal claims.
4. Who we share it with
We share data only with: (a) the AI model provider you select (for example OpenAI/Codex, Google/Gemini, xAI/Grok or Anthropic/Claude), which receives your prompts and the related technical data solely to produce the response you requested; (b) infrastructure, hosting and cloud providers that run our databases, logging and servers; and (c) competent public authorities and courts where the law requires it. These providers process data on our behalf or under their own terms and are not permitted to use it for their own purposes. Some providers operate outside Türkiye; where that is the case, transfers rely on the mechanisms recognised by applicable law (such as adequacy decisions, appropriate safeguards or approved standard contracts).
5. Data retention
System and access logs are kept for at least two years, as required by applicable law (Law No. 5651 in Türkiye). Account and contract data is kept for as long as your account is active and for the statutory limitation periods that follow (up to 10 years). Prompts and technical telemetry sent through the API are kept only for the minimum period technically necessary for debugging and security verification once routing is complete. When retention is no longer justified, data is deleted, destroyed or anonymised.
6. Cookies
The site uses strictly necessary technical cookies and storage to work and stay secure. Functional, performance and analytics cookies are off by default and are used only if you opt in.
7. Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to decisions based solely on automated processing. If you are in Türkiye, you have the rights listed in Article 11 of Law No. 6698 (KVKK), including learning whether your data is processed, requesting information, learning the purposes of processing, knowing who it is transferred to, requesting correction or deletion, and claiming compensation for unlawful processing. See our KVKK Privacy Notice for details and how to apply. We answer applications as soon as possible and within thirty days at the latest.
8. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via the site or directly to active customers.
9. Contact
Questions about this policy or your data: info@adyrra.com.