KVKK Disclosure NoticeKVKKDisclosure Notice

This disclosure is prepared under the Turkish Personal Data Protection Law (Law No. 6698, KVKK) to inform you about the processing of your personal data when you use the LYRA platform and related services. Data Controller: Your personal data is processed by Bykandil (provider of LYRA services) as data controller. Contact: lyra@bykandil.com. Data Processed and Purposes: Your identity and contact data (name, email, etc.) are processed for account creation, service delivery and customer support; usage data (sessions, preferences) for improving the service and ensuring security; chat and content data for providing you with responses and assistant features. Legal basis: performance of contract, legitimate interest, consent and legal obligations. No Sale or Sharing with Third Parties: Bykandil does not sell your personal data under any circumstances. We do not share your data with third parties (companies, data brokers, etc.) for advertising, marketing or other commercial purposes. Your data is processed only for the purposes set out in this notice and where required by law. AI Services and Data Security: LYRA may use external AI providers (e.g. ChatGPT, DeepSeek, Gemini) in addition to our own infrastructure to generate responses. User requests are transmitted over encrypted, secure channels in an isolated manner and to the minimum extent necessary. Data sent to providers is not used for advertising or model training; contractual and technical measures ensure that your data is not misused. Your personal data is not "sold" or shared with third parties for commercial purposes in this context. Retention and Security: Your data is retained for the duration of the service and statutory retention periods, after which it is deleted or anonymised. We use access controls, encryption and secure infrastructure to protect your data. Your Rights: Under KVKK Art. 11 you have the right to learn whether your personal data is processed, to request information if it is, to learn the purpose of processing and whether it is used accordingly, to know the third parties to whom it is transferred (in Turkey or abroad), to request correction of incomplete or incorrect data, to request deletion or destruction under KVKK Art. 7, to request that corrections and deletions be notified to third parties, to object to automated processing that results in a negative outcome for you, and to claim compensation if you suffer damage due to unlawful processing. You may submit requests to lyra@bykandil.com; we will respond within thirty days. Complaints: You have the right to lodge a complaint with the Turkish Personal Data Protection Board (kvkk.gov.tr). This notice may be updated by LYRA and Bykandil; the current version will always be available on this page.