Clasr Legal
Privacy Policy
The data controller for personal data processed through Clasr is HİLAL ŞENÇELİK (sole proprietorship), YAHŞİBEY MAH. KAPLICA CAD. 1.KAYABAŞI SK. TAYKENT APT NO: 15 İÇ KAPI NO: 2 OSMANGAZİ / BURSA, Türkiye, contact: legal@clasr.ai. Clasr operates under Türkiye's KVKK; where the GDPR applies, the same entity acts as data controller.
Version 1.1 · July 2026
Effective Date: July 2026
Published by: HİLAL ŞENÇELİK, operator of Clasr, Bursa, Türkiye
This Privacy Policy applies to clasr.ai and the Clasr manuscript signal reading Service. It explains what personal data Clasr collects, why, and what choices are available. For institutional customers, this Policy works alongside Clasr's Data Processing Agreement, available on request.
1. Who This Policy Covers
This Policy applies to anyone who visits clasr.ai, creates a Clasr account, or submits a manuscript to the Clasr Service ("you"). It is published by HİLAL ŞENÇELİK, the sole proprietor operating Clasr from Bursa, Türkiye ("Clasr," "we," or "us").
2. What Data We Collect
2.1 Account Data
When you create an account, we collect your name, email address, and, where relevant, your institutional affiliation. When you use checkout, billing information is processed by the payment provider identified at checkout. Clasr does not directly receive or store complete payment card details.
2.2 Manuscript Data
When you submit a manuscript for analysis, we receive the manuscript file and its contents, which may include your name, the names of co-authors, institutional affiliations, and any other information contained in the manuscript text or metadata.
2.3 Usage Data
We collect data about how you use the Service, including login times, the number of readings used, the features and output modes selected, and similar interaction data.
2.4 Technical Data
We automatically collect certain technical information when you visit clasr.ai or use the Service, including IP address, browser type, device type, and similar information, some of which is collected through cookies as described in our Cookie Policy.
3. How We Use Your Data
| Purpose | Legal basis (GDPR Art. 6 / KVKK Art. 5) |
|---|---|
| Providing the Service (account creation, authentication, generating and delivering analysis reports) | Performance of a contract (Art. 6(1)(b); KVKK 5/2-c) |
| Billing, invoicing, and payment administration | Performance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c); KVKK 5/2-ç) |
| Customer support and responding to inquiries | Performance of a contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)) |
| Service security, fraud and abuse prevention, logging | Legitimate interests (Art. 6(1)(f)) and legal obligation (Art. 6(1)(c), including Turkish Law No. 5651) |
| Service improvement and aggregate usage analytics | Legitimate interests (Art. 6(1)(f)); consent where required for non-essential cookies (Art. 6(1)(a)) |
| Marketing emails and newsletters | Consent (Art. 6(1)(a); KVKK 5/1), withdrawable at any time |
| Compliance with tax, accounting and other legal obligations | Legal obligation (Art. 6(1)(c); KVKK 5/2-ç) |
4. What We Do Not Do
- We do not use your manuscript content to train any artificial intelligence model, whether operated by Clasr or by any third party we work with.
- We do not sell your personal data.
- We do not share your manuscript content with any party other than the processors described in Section 6, and we do not use it for any purpose other than generating your signal report.
5. How Long We Keep Your Data
- Uploaded manuscripts: deleted immediately after report generation.
- Analysis reports: retained for 7 days by default (user-configurable), then permanently deleted.
- Account and profile data: retained while your account is active and for up to 12 months after closure, unless earlier deletion is requested.
- Billing and invoice records: retained for 5 years as required by Turkish tax law (VUK), and up to 10 years where commercial law requires.
- Security and access logs: retained for 2 years under Turkish Law No. 5651.
- Support correspondence: retained for 2 years after resolution.
6. Who We Share Data With
We work with a small number of service providers to operate the Service. We do not sell or rent your personal data to anyone.
| Provider | Location | Purpose | Safeguard |
|---|---|---|---|
| Anthropic, PBC | USA | AI analysis of uploaded manuscripts (no training on user content; limited retention) | SCCs / DPA |
| Vercel Inc. | USA | Frontend hosting and delivery | SCCs / DPA |
| Railway Corp. | USA | Backend application hosting | SCCs / DPA |
| Supabase, Inc. | USA | Database, authentication, and storage | SCCs / DPA |
| Resend Inc. | USA | Transactional email delivery | SCCs / DPA |
Payment data is processed by the checkout provider identified before purchase. Clasr does not directly receive or store complete payment card details.
As of the effective date of this Policy, manuscript data sent to Anthropic is processed under Anthropic's standard commercial retention terms, which permit limited, time-bound retention (currently up to 30 days) for trust and safety purposes before deletion, and is not used to train any model. Clasr is working toward a Zero Data Retention arrangement with Anthropic; this Policy will be updated once that arrangement is in place.
7. International Data Transfers
Because Clasr is operated from Türkiye and works with service providers located in other countries, including the United States, your data may be processed outside the country in which you are located. Where this involves a transfer of personal data subject to the EU General Data Protection Regulation to a country not recognized as providing an adequate level of protection, Clasr relies on the Standard Contractual Clauses adopted by the European Commission, details of which are available in Clasr's Data Processing Agreement upon request.
8. Your Rights
Depending on where you are located, you may have rights to access, correct, delete, or restrict the processing of your personal data, to object to certain processing, or to receive a copy of your data in a portable format.
To exercise any of these rights, contact us at legal@clasr.ai. We will respond within a reasonable time and in accordance with applicable law. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.
EU/UK representative: Based on the current nature and scale of our processing (occasional, not large-scale, and not involving special categories of data), we rely on the exemption under GDPR Art. 27(2) and have not appointed an EU representative at this time. We will appoint one if our processing activities change. EU users may exercise their rights directly via legal@clasr.ai.
9. Data Security
We use technical and organizational measures designed to protect your data, including encryption of data in transit, access controls limiting who can view personal data, and automatic deletion of manuscript files after report generation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children's Privacy
The Service is intended for users who are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has provided us with personal data, contact legal@clasr.ai and we will take appropriate steps to delete it.
11. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated Policy at clasr.ai/legal with a revised effective date, and, for material changes, will provide additional notice such as an email to registered users.
12. Contact Us
For questions about this Policy or how we handle your data, contact legal@clasr.ai.