Privacy and Personal Data

This notice explains which personal data are processed for which purposes while using RONCHAMP, to whom they may be transferred, and your rights. The Turkish text is the binding version; this translation is provided for convenience.

1. Data controller

2. Categories of processed data

• Identity and contact: name, email, phone and company/office details.
• Account and security: account identity, session, IP, device/browser and security logs.
• Orders and finance: plan, order, collection, refund and invoicing details. Card data are never stored by RONCHAMP.
• Projects and usage: uploaded architectural files, project inputs, generated outputs, activity history and preference records.
• Support: email, support requests and any descriptions or attachments provided by the user.

3. Purposes and legal bases

• Running membership, orders, digital delivery and support; establishment or performance of the contract.
• Fulfilling invoicing, accounting, payment and official requests; legal obligation.
• Securing accounts and the platform, preventing abuse and measuring service quality; legitimate interest, with fundamental rights and freedoms observed.
• Managing legal disputes; establishment, exercise or protection of a right.
• Optional processing such as marketing messages or use of project data in model development/training; only with separate, freely given explicit consent in the relevant flow.

4. Collection method

Data are collected fully or partially by automated means through the website and panel forms, the user account, order/payment flows, uploaded files, support channels, cookies or local storage, and system logs.

5. Transfers

Data may be shared, only to the extent necessary for the purpose, with Paddle — our merchant of record — and relevant financial institutions for payments, with service providers supplying hosting/security/communication support, with financial and legal advisors, and with legally authorised public bodies. Each recipient processes data only within its own role and statutory obligations.

If data must be transferred abroad, the transfer conditions of Law No. 6698 and appropriate safeguard mechanisms are applied; flow-specific additional information is provided to the user before the operation.

6. Project files and AI services

The user's project files are processed to deliver the service. By default these files are not used to train RONCHAMP or third-party models. Use for training/development may only happen with separate, revocable consent whose scope is explained. When the user calls third-party services with their own API key, that provider's terms additionally apply.

7. Google user data

• What is accessed: when you sign in with Google, your name, email address and account identifier; when you link Google Drive, the files and folders of your Drive and of the shared drives you can open, including the project folders you bind to RONCHAMP projects.
• How it is used: only to provide the features you use: listing and opening the files of a bound project folder, reading the documents a step of your project needs, and writing the drawings and reports RONCHAMP produces back into that folder.
• Storage and protection: the access granted by Google is stored encrypted and used only by RONCHAMP's servers; file contents are processed for the feature you asked for, and what RONCHAMP produces is written to your own Drive.
• Sharing: Google user data are not sold, not used for advertising, not transferred to others except as needed to provide these features or as the law requires, and not read by people except with your consent, for security, or as the law requires. They are not used to develop, improve or train generalised AI or machine-learning models.
• Your control: you can cut the link at any time in Settings › Connections, which gives RONCHAMP's access back to Google; you can also remove it in your Google Account's third-party access page, and ask for deletion at the application email above.

8. Retention and security

Data are kept for the processing purpose and statutory retention periods; when the period ends they are deleted, destroyed or anonymised. Reasonable technical and administrative measures such as access control, encrypted communication, logging and backups are applied. Absolute security of any transmission over the internet cannot be guaranteed.

9. Cookies and local storage

Essential technical records may be used for sessions and basic preferences to work. If non-essential analytics or marketing technologies are introduced, a prior choice is offered for them. Records can be cleared from browser settings; blocking essential records may break some functions.

Page views are counted to see how the site is used, without a cookie of their own and without keeping the visitor's IP address: only the page, the referring site, the device kind and the day are kept, nothing that could identify a visitor across days.

10. Your rights

For your rights under Article 11 of the Turkish PDPL (Law No. 6698), you may apply to info@ertugrulerkan.com stating your identity and request. Identity verification may be required depending on the nature of the request. Applications are answered within the time and procedure set by law.