Privacy policy

This page explains how the document you upload to tezkeys (tezkeys.com) and the data generated while you use the service are processed. It also serves as the privacy notice under Turkish Personal Data Protection Law No. 6698 (KVKK).

1. Data controller

The service is provided by RULLA LTD (İngiltere ve Galler’de kayıtlı şirket, sicil no 17161340; 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, Birleşik Krallık). You can reach us at [email protected] about this policy and anything concerning your data.

2. What data we process

• The document you upload. The file itself is not stored. We process the text read from the document, the file name, the page and word counts, and the review settings you choose (document type, field, focus note).
• The report. The findings, committee questions and reference check results generated for your document. The report contains short excerpts from your document.
• Upload activity. How many uploads were used for which report.
• Your account details. If you create an account: your e-mail address, your sign-in method (password, a code sent by e-mail, or Google sign-in) and the time you accepted the terms. Your password does not reach us; it is kept in encrypted form by the authentication service.
• Payment records. Which pack you bought and when, and the identifier of the payment transaction. Your card details do not reach us.
• Technical logs. To prevent abuse, your IP address and the time of the request are processed for a short period.

The reference pre-check does not require an account. You need to create an account for the full report and to buy a pack. Your document may contain personal data about you or other people (such as names, institutions or participant information); this data is processed only to generate the report.

3. What we use the data for

• To generate the free reference pre-check and the full report, and to show the report to you.
• To deduct uploads and to return them when a report cannot be completed.
• To protect the service against abuse and to fix errors.

We do not use your document to train AI models, we do not sell it to third parties and we do not process it for advertising purposes. The legal basis is providing the service to you (performance of a contract). By uploading your document, you agree that its text is transferred to the service providers abroad listed below so that the report can be generated.

4. Who it is shared with

To generate the report, the text of your document is transferred to the service providers below. Some of these providers are located abroad.

• Anthropic (USA). For the full report, the text of your document is sent to Anthropic to be read by the language model (Claude). The answer you write in the defense rehearsal is sent the same way to generate feedback; your answer is not stored on our servers, it is kept only in your own browser. Content sent this way is not used for model training.
• Crossref (USA). In the reference check, only the entries in your reference list (author, title, DOI) are queried; the text of your thesis is not sent.
• Cloudflare. Traffic to the site passes through Cloudflare for security and speed.
• Hetzner (European Union). Our servers are hosted here; the report and the document text are stored here.
• Stripe (USA and Ireland). Stripe takes the payment; your card details are processed by Stripe and do not reach us. Your e-mail address and the pack you bought are passed to Stripe.
• Clerk (USA). Clerk handles account creation and sign-in; your e-mail address and session details are kept there.

Your data is not shared with anyone else unless the law requires it.

5. How long it is kept

• The uploaded file: not stored; it is discarded after it has been read.
• The text read from the document: kept so that it can be shown on the report screen, and deleted 7 days after the upload.
• The report: kept until you delete it. The “Delete report” button on the report screen permanently deletes the report and the stored document text.
• Your account: you can delete your account at any time from the “Delete account” section at the bottom of the My account page; when you do, the reports linked to your account and the stored document texts are also permanently deleted, and your unused uploads are forfeited.
• Upload activity: kept for accounting and refund purposes.

6. Report address

A report can be viewed by anyone who knows its address; this is how you can share it with your advisor. The address is too long to guess and is closed to search engines. Only you can delete a report linked to your account; a report uploaded without an account can be deleted by anyone who knows its address. Share the address only with people you trust.

7. What is kept in your browser

We do not use tracking or advertising cookies. The list of reports you have created, your “addressed” marks and the code you entered are kept only in your own browser (local storage); they are deleted if you clear your browser data. Cloudflare may set a strictly necessary cookie for security purposes. When you sign in, strictly necessary session cookies are used to keep you signed in.

8. Your rights

Under Article 11 of the KVKK, you have the right to learn whether your data is processed, to request information, to request that it be corrected or deleted, to learn who it has been transferred to, and to object to its processing. You can delete your report yourself at any time; for other requests, writing to [email protected] is enough. Your request will be answered within 30 days at the latest.

9. Changes

If this policy changes, the current version is published on this page and the date at the top is updated. For the rules of the service, see the terms of use.

This English version is provided for convenience. If it differs from the Turkish version, the Turkish version prevails.