Privacy policy

RIDVANULLAH ARSLAN, a sole proprietorship in Türkiye, is the data controller for Paindex (paindex.io). Contact: support@paindex.io.

• Account: your email address. If you sign in with Google, Google shares your name, email address and profile picture with us; we use the email address to identify your account.
• Sign-in: one-time sign-in links and the cookies that keep you signed in.
• Plan and billing: your plan, its status and renewal dates, and the customer and subscription IDs Paddle gives us. When you buy, we pass your email address and account ID to Paddle so the purchase reaches your account. Card and other payment details are collected by Paddle, never by us.
• What you send us: early-access requests, including the optional note, and emails.
• Use of the archive: which cards a Premium member has opened, to count the monthly allowance.
• Analytics: pages viewed and similar events, measured with PostHog without cookies and without session recordings.
• Technical logs: IP address, browser and request details kept by our hosting provider for security and troubleshooting.

• To run your account and the plan you bought (performance of a contract; KVKK article 5(2)(c)).
• To send sign-in links and emails about your account or plan (contract).
• To keep the site secure and stop abuse such as scraping or shared accounts (our legitimate interests; KVKK article 5(2)(f)).
• To understand how the site is used and improve it, without cookies (legitimate interests).
• To meet legal obligations such as keeping records (legal obligation; KVKK article 5(2)(ç)); Paddle keeps the tax records for purchases.
• To tell people who asked for early access when the plans open (legitimate interests); you can ask us to stop at any time.

We do not sell personal data and do not use it for advertising.

We only use the cookies needed to sign in and stay signed in. Paddle's checkout sets its own cookies when you pay. We use no advertising cookies, and our analytics runs without cookies.

They process data on our instructions under data processing terms. Paddle and Google are responsible for their own processing under their own privacy policies.

Some of these providers process data outside Türkiye and outside the European Economic Area, mainly in the United States, under their data processing terms.

• Account and plan data: while your account is open, and deleted within 30 days after you close it, except records the law requires us to keep.
• Early-access requests: until the plans open, or earlier if you ask us to delete them.
• Hosting logs: for the short period our hosting provider keeps them.
• Purchase records: kept by Paddle for as long as tax law requires.

• Under the GDPR, where it applies to you: access, correction, deletion, restriction, objection, data portability and withdrawing consent. You can also complain to your local data protection authority.
• Under KVKK article 11: to learn whether your data is processed and ask for information about it; to learn why it is processed and whether it is used for that purpose; to know the third parties it is shared with in Türkiye or abroad; to have it corrected or deleted and those parties told; to object to a result against you that comes only from automated analysis; and to claim compensation for damage caused by unlawful processing.
• Write to support@paindex.io from the address on your account. We answer within 30 days. You can also complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

Paindex is not meant for people under 18.

Data is encrypted in transit, access to the database is limited by role, and payment details never reach our servers.

We post updates here with a new date, and if a change matters, we email account holders.