This Privacy Policy describes how Gefyra ("we", "us") collects, uses and protects your data when using the Gefyra platform ("Service"), in accordance with EU Regulation 2016/679 (GDPR) and Turkish Law No. 6698 (KVKK).
⚠ Age Requirement: This Service is intended exclusively for users 18 years and older. We do not knowingly collect data from minors.
🤖 AI Disclosure (EU AI Act): Sofia is an artificial intelligence system — not a human. You are interacting with an automated AI system. Disclosure in accordance with EU Regulation 2024/1689.
1. Data We Collect
- Account information: Email, name, profile photo via Google OAuth
- Profile data: Age, gender, city, bio, search preferences
- Sofia AI messages: Stored for conversation history and service improvement
- Messages between users: Stored to operate the messaging service
- Payment data: Managed exclusively by Stripe — we do not store card details
- Usage data: Pages, features, timestamps — for service improvement
- Technical data: IP address, browser type, device
2. How We Use Your Data
- Providing and improving the Service
- Account management and payment processing via Stripe
- Sending service emails (receipts, match notifications, new messages)
- Automated content moderation to detect illegal material
- Detecting and preventing abuse
- Compliance with legal obligations (GDPR, KVKK, EU AI Act, DSA)
3. Messages Between Users
Messages you exchange with other users:
- Are stored on our servers to operate the service
- Are not read by human staff unless a violation report is submitted or required by law
- Are subject to automated screening for inappropriate content
- May be disclosed to competent authorities under a lawful order
ℹ Legal Basis for Processing (GDPR Art. 6): We process your data based on (a) performance of a contract to provide the Service, (b) legitimate interest for security and abuse prevention, and (c) legal obligation where required.
4. Third Parties
- Stripe — payment processing and subscription management
- Google OAuth — user authentication
- xAI (Grok) — AI model powering Sofia's responses
- Render — hosting and database infrastructure
- Resend — transactional email delivery
Each third party has its own privacy policy. We share only the minimum necessary data.
5. Cookies
We use only essential cookies to maintain your session. We do not use advertising or third-party tracking cookies.
6. Your Rights (GDPR & KVKK)
As a user in the European Union or Turkey, you have the right to:
- Access your personal data
- Correct or delete your data
- Object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with your national data protection authority
To exercise your rights: info@smartbots.gr
7. Data Retention
- Account data: retained while the account is active
- User messages: retained for 12 months from creation
- After account deletion: removed within 30 days
- Financial records: retained as required by tax law
8. Data Security
We use SSL/TLS encryption for all data in transit. Data is stored on Render's secure servers. We apply automated abuse detection systems.
9. Changes to This Policy
We may update this Policy from time to time. You will be notified by email or via an announcement in the Service. Continued use after changes constitutes acceptance.
10. Contact