Privacy policy

01Who is responsible

KARBEY YAYINCILIK EĞİTİM VE DANIŞMANLIK HİZMETLERİ SANAYİ TİCARET LİMİTED ŞİRKETİ is the data controller for Nonda. Address: Gülbahar Mah. Cemal Sururi Sok. No:15/E Kat:8 Daire:40 Halim Meriç İş Merkezi, Şişli / İstanbul. You can reach us by email at kvkk@nonda.ai.

02What we collect

We process the following categories of data:

• Account data: your name, email address and a securely hashed password.
• Session and security data: session identifiers, IP address and browser user agent, used to keep you signed in and to prevent abuse.
• Usage and billing data: the models you used, token or character counts, credits, provider cost where known and payment records.
• Content you choose to store on our servers: shared links, cloud backups of projects and the files they contain, team names and invitations.
• Support messages you send us.

03What stays in your browser

Drafts, chats, projects, your media library, brand kit, prompts, characters and campaigns are stored in your browser (IndexedDB and local storage). We cannot see them unless you back them up to the cloud or share them. Clearing your browser data deletes them.

04Generation providers

When you generate text, images, video or audio, your prompt and any files you attach are sent to the provider that runs the selected model: Anthropic (Claude), OpenAI, Google (Gemini, Imagen, Veo), DeepSeek, xAI, Mistral AI, OpenRouter, fal.ai and ElevenLabs. Each provider processes that content under its own terms and privacy policy. We send only what the request needs and do not add your name or email.

05Why we process data

We process data to provide the service you asked for (contract), to keep it secure and prevent misuse (legitimate interest), to meet accounting and legal obligations (legal obligation) and, where we ask for it, with your consent (for example optional cookies).

06How long we keep data

Account data is kept while your account exists. Usage and payment records are kept as long as accounting law requires. Shared links expire on the date you choose or when you revoke them; cloud backups remain until you delete them or your account. When you delete your account we remove your account, sessions, shares, cloud backups and team memberships. Payment, credit and usage records that accounting law requires us to keep are retained without your name or email address.

07Payments

Payments are processed by the provider shown at checkout (Tami or Stripe). For on-site Tami payments, card details pass over an encrypted connection through our server directly to Tami. Card numbers and security codes are not stored or written to application logs. We retain payment status, amount and credit records. Stripe checkout collects card details on its own payment page.

08Your rights

You can access, correct, export or delete your data, object to or restrict processing and withdraw consent at any time. Most of this is available in Settings (download your data, delete your account). For anything else contact us by email at kvkk@nonda.ai. You may also complain to your data protection authority.

09International transfers

Some providers process data outside your country. Where required we rely on appropriate safeguards such as standard contractual clauses offered by those providers.

10Security

Passwords are hashed, sessions use secure HTTP-only cookies, provider keys stay on the server, stored files are private by default and only accessible through signed or authorised requests.

11Children

Nonda is not intended for children under 16 and we do not knowingly collect their data.

12Changes

We will update this page when our practices change and show the date of the latest version.