Privacy Policy

Last Edited: 18.09.2026

We, ANCİENDA TEKNOLOJİ YAZILIM VE PAZARLAMA A.Ş. ("Ancienda", "us", "we", or "our"), place great importance on your privacy. This Privacy Policy applies to NoteBase, a product developed and operated by Ancienda, including its applications, website, and their various and future versions (hereinafter collectively referred to as the "Service"), and is incorporated into and subject to our Terms of Use. This document also serves as a Privacy Notice in accordance with applicable data protection laws, including the Turkish Law on the Protection of Personal Data No. 6698 (KVKK).

By accessing or using our Service, you acknowledge that you have read and understood this Policy regarding the collection, use, and disclosure of your personal data.

Data protection laws can vary from country to country. Depending on your place of residence, you may have additional rights or be entitled to further information, as described in this Policy.

Children's Privacy

Our Service is not directed to children, and we do not knowingly collect personal data from individuals under the applicable age of consent without valid permission from a parent or legal guardian.

• Age Requirements: In Türkiye, parental or legal guardian consent is required for users under the age of 18. For users residing in the European Union, the required age of consent varies between 13 and 16 years of age, subject to the national laws of the respective member state.
• User Obligation: If you are under the applicable age of consent in your jurisdiction, you must not access or use our Service without obtaining explicit permission from your parent or legal guardian.
• Data Deletion: In the event that we become aware of the inadvertent collection of personal data from a user under the applicable age limit without verified parental or guardian consent, we will take immediate steps to securely delete such information from our systems.

What Data Do We Collect

We are committed to protecting your personal data and taking all necessary measures to ensure it is processed strictly in accordance with your requests. While you are not obligated to provide the personal data we request, your refusal to do so may limit our ability to offer certain products or services to you.

The personal data we collect from you may include:

• Microphone Access: To record audio and transcribe it into notes, which is essential for users utilizing voice input for note-taking.
• Camera Access: To capture photos and convert them into notes.
• Photo Library / Gallery: To import images from your device's gallery and convert them into notes.
• User Content: Any files, documents, links, images, photos, videos, audio recordings, media, or other data provided, uploaded, transmitted, created, stored, edited, or shared through the Service.
• Device ID: To uniquely identify your device, facilitating user session management and security assurance.
• Google or Apple Account ID/Email: To identify and authenticate users accessing the Service via Google or Apple accounts, ensuring secure access and proper account management.
• Log and Usage Data: Service-related, diagnostic, usage, and performance information automatically collected by our servers and recorded in log files when you access or use the Service. Depending on your interactions, this may include your IP address, browser type and settings, in-Service activity (e.g., date/time stamps, viewed pages/files, searches, and utilized features), and device event data (e.g., system activity, error reports, and hardware settings).
• Customer Transaction Data: Order and transaction details related to your purchases.
• Cookies, Pixels, and Similar Technologies: Information collected automatically upon interaction with the Service (e.g., website visits, app interaction, note creation). This data is gathered using tracking technologies (cookies, pixels) that collect real-time data to operate, secure, and improve the Service. For detailed information and preference management, please refer to our Cookie Policy.
• Third-Party Integrations (e.g., Notion): If you connect third-party platforms or productivity applications to the Service, we will access and process data necessary to establish and maintain this connection.
• Direct Export to Notion: Upon explicit permission, we will process required authentication tokens and account identifiers to facilitate the direct export, transfer, or synchronization of NoteBase notes to your Notion workspace.
• Revoking Access: You retain full control over this data flow. You may revoke access to Notion or any other connected third-party application at any time via NoteBase account settings.

Sensitive Information: The sharing of content containing sensitive personal data via NoteBase is strictly prohibited. This includes, but is not limited to, financial information, social security numbers, health data, images of third individuals, data concerning minors, or any highly confidential information.

Legal Basis for Data Collection

We collect and process your personal data in strict accordance with the legal grounds established by applicable data protection laws, including Articles 5 and 6 of the Turkish Personal Data Protection Law (KVKK) and Article 6 of the General Data Protection Regulation (GDPR). We rely on the following legal bases for processing:

• Explicit Consent: In instances where your consent is legally mandated—such as the processing of special categories of personal data (e.g., facial data) or the transmission of marketing communications—we process your data solely upon your freely given, informed, and explicit consent, obtained through a clear opt-in mechanism.
• Performance of a Contract: Where the processing of your personal data is necessary for the establishment, execution, or performance of our Service.
• Compliance with a Legal Obligation: Where the processing of your data is necessary for compliance with a legal or regulatory obligation to which we are subject.
• Legitimate Interests: Where processing is necessary for the purposes of our legitimate interests, such as enhancing our Service, analyzing diagnostic or error reports, and preventing fraud

Cookies and Similar Technologies: Our Service utilizes cookies and comparable tracking technologies to facilitate core functionality, analyze user engagement, and optimize your overall experience. While technically essential cookies are strictly necessary for the operation of our Service and do not require prior consent, we will not deploy any other non-essential cookies to your device without first obtaining your explicit, opt-in consent, in strict compliance with the GDPR and KVKK.

How We Use Your Personal Information

We may use your personal data to provide, maintain, enhance, and promote our Service, as well as to communicate with you. Specifically, we process your information for the following purposes:

• Providing, Maintaining, and Personalizing the Service: The data you provide enables us to help you log in, host your content, operate our note-taking and AI functionalities, process financial transactions, and transmit transactional communications regarding your use of the Service.
• Measuring, Analyzing, and Improving the Service: To optimize our Service and ensure a continuously improving user experience, we process specific data to analyze usage trends and system performance, conduct user research and surveys, and collect user feedback.
• Providing Support, Resolving Issues, and Responding to Requests: We utilize your information to deliver requested customer support, troubleshoot and resolve technical anomalies, and transmit essential administrative communications.
• Sending Marketing Communications: We may send promotional materials concerning the Service, including information on new features, special offers, contests, and promotions, strictly subject to your explicit opt-in consent where mandated by applicable law.
• Ensuring Security and Preventing Fraud: This includes investigating, detecting, preventing, or reporting fraud, misrepresentations, security breaches or incidents, and other potentially prohibited or illegal activities, to help protect your account and the integrity of the Service.
• Verifying Your Identity: Where necessary, we may process your data to authenticate your identity, ensuring the security and integrity of your account and the Service.
• Legal Compliance: To comply with any applicable laws or regulations. This includes appropriately responding to lawful requests for information from government authorities or third parties through valid legal processes.

Who We Share Your Data With

We may share or transfer your personal data to the following parties under specific circumstances:

• Affiliates: Businesses that are legally part of the same group of companies as Ancienda.
• Payment Processors: We may offer paid products or services within the Service. In such cases, we use third-party services for payment processing (e.g., payment gateways). We do not store or collect your payment card details. That information is provided directly to our third-party payment processors, and their use of your personal information is governed by their respective privacy policies.
• AI Service Providers: Some features of our Service rely on third-party artificial intelligence services to generate transcriptions, summaries, or other AI-generated content. When you use these features, certain user content, such as audio recordings, text notes, images, or uploaded files, may be securely transmitted to these third-party providers solely to generate the requested AI output. These providers process the data strictly on our behalf and are contractually required to maintain security and privacy protections that meet or exceed our own standards. We do not use your content to train public AI models.
• International Data Transfers: As a global company, we work with third-party service providers and partners worldwide. Therefore, your personal data may be transferred to and processed in countries other than your own. When conducting these international transfers, we take appropriate measures to ensure the security of your data and comply fully with applicable data protection laws.
• Law Enforcement and Safety: We may disclose personal information to third parties if we have a good-faith belief that access, use, preservation, or disclosure of the information is reasonably necessary to:
• Comply with any applicable law, regulation, legal process, or enforceable governmental request.
• Enforce our Terms of Use, including the investigation of potential violations.
• Detect, prevent, or otherwise address fraud, security, or technical issues.
• Protect the rights, property, or safety of Ancienda, our users, or the public, as required or permitted by law.
• Business Transfers: If Ancienda is involved in a merger, acquisition, or sale of all or a portion of its assets, your personal data may be transferred to the receiving party (including during the due diligence process). We will notify you of any such change in ownership, how it affects the use of your personal data, and any choices you may have regarding your information.
• With Your Consent: We may disclose your personal information to third parties outside of Ancienda when we have your explicit consent to do so.

Protection of Personal Data & Security

Ancienda implements various administrative, organizational, and technical security measures to protect your personal data against unauthorized access, loss, or alteration. However, please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

Third-Party Services and Links: If you access a website, product, or service provided by a third party, even if accessed through our Service, that third party may also collect information about you. We encourage you to review the privacy policies of these third parties to understand how they process your data. Please note that this Privacy Policy does not apply to any data collected by third-party services.

How Long Do We Keep Your Data

Unless a longer retention period is required or permitted by applicable law (such as tax, accounting, or other legal obligations), we will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy.

General user data (such as account details and contact information) is retained for as long as your account remains active. Once your account is terminated or deleted, we will securely delete or anonymize your personal data, except where we are legally required to retain specific data for a longer, statutory period.

Your Rights

Depending on your region of residence, you may have specific legal rights regarding your personal data. To exercise any of these rights, you can contact us at any time by emailing contact@ancienda.com. We will respond to your request within thirty (30) days.

1. Rights for Residents of the Republic of Türkiye

If you reside in Türkiye, you have the following rights under Article 11 of the Law on the Protection of Personal Data (KVKK) by applying to us as the Data Controller:

• To learn whether your personal data is processed;
• To request information if your personal data has been processed;
• To learn the purpose of the processing of your personal data and whether it is used in compliance with that purpose;
• To know the third parties to whom your personal data is transferred in-country or abroad;
• To request the rectification of incomplete or inaccurate data, if any;
• To request the erasure or destruction of your personal data under the conditions laid down in Article 7 of the KVKK;
• To request notification of the operations carried out in compliance with the rectification, erasure, or destruction requests to third parties to whom your personal data has been transferred;
• To object to the processing, exclusively by automatic means, of your personal data, which leads to an unfavorable consequence for you;
• To request compensation for the damage arising from the unlawful processing of your personal data.

2. Rights for Residents of the European Economic Area (EEA), United Kingdom, and Switzerland

If you reside in one of these regions, you have the following rights under the General Data Protection Regulation (GDPR) in addition to the core rights mentioned above:

• Right to Restriction of Processing: You can ask us to restrict the processing of your personal data under certain circumstances.
• Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• Right to Object: You may object to the processing of your personal data based on our legitimate interests. If you object to processing for direct marketing purposes, we will immediately stop processing your data for such purposes.
• Right to Lodge a Complaint: If you believe our data processing activities breach the GDPR, you have the right to lodge a complaint with the data protection supervisory authority in your country of residence.

3. Rights for Residents of California

If you are a consumer residing in California, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These include the right to know what personal information we collect, the right to request the deletion of that information, and the right to opt-out of the "sale" or "sharing" of your personal information.

Changes to the Privacy Policy

Ancienda reserves the right to modify, review, or update this Privacy Policy at any time. The most current version will always be available on this page, and we encourage you to review it frequently.

If you disagree with any changes made to this Policy, you may delete your account at any time and stop using the Service. By continuing to access or use the Service after any modifications become effective, you acknowledge and agree to be bound by the revised Privacy Policy.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or your privacy rights, please contact us at:

• Email: contact@ancienda.com
• Data Controller: ANCİENDA TEKNOLOJİ YAZILIM VE PAZARLAMA A.Ş.
• Address: Ayazağa Neighborhood, Mimar Sinan Street, Seba Office Boulevard, Block A, No: 15, Sarıyer / İstanbul, Türkiye