Welcome to WOWBOX ("Platform," "we," "us," or "our"), accessible at https://www.wowbox.life. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our Platform and use our services.
We are committed to protecting your privacy in compliance with:
• The Turkish Personal Data Protection Law No. 6698 (KVKK)
• The European Union General Data Protection Regulation (EU 2016/679) (GDPR)
• Other applicable international data protection laws
By accessing or using WOWBOX, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
Identity: WOWBOX (Individual Project)
Country of Origin: Republic of Turkey
Contact Email: info@wowbox.life
Website: https://www.wowbox.life
For KVKK purposes, WOWBOX acts as the "Veri Sorumlusu" (Data Controller).
For GDPR purposes, WOWBOX acts as the "Data Controller."
3.1 Data Collected Automatically
When you visit our Platform, we may automatically collect:
• IP address and approximate geographic location
• Browser type, version, and language preferences
• Device type, operating system, and screen resolution
• Pages visited, time spent, referral URLs, and click patterns
• Cookies and similar tracking technologies (see Section 7)
3.2 Data You Provide Directly
When you create an account or use our services, we may collect:
• Google Account information (name, email address, profile picture) obtained through Google OAuth 2.0 authentication
• Language preference
• Contact form submissions (name, email, message content)
• Payment information (processed securely through Stripe; we do NOT store your credit card details)
3.3 Data Generated Through Service Usage
When you use WOWBOX tools and sub-projects, we may collect:
• Service usage records and activity logs
• Credit/balance transaction history
• Content you create or archive through our tools
• Preferences and settings within individual tools
3.4 Special Categories of Data
We do NOT intentionally collect special categories of personal data (sensitive data) such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data.
We process your personal data for the following purposes:
• Account creation & management — Contract performance / Sözleşmenin ifası
• Providing and improving services — Contract performance / Sözleşmenin ifası
• Processing payments — Contract performance / Sözleşmenin ifası
• Sending service notifications — Legitimate interest / Meşru menfaat
• Security and fraud prevention — Legitimate interest / Meşru menfaat
• Responding to contact requests — Consent / Açık rıza
• Legal compliance — Legal obligation / Kanuni yükümlülük
• Analytics and platform improvement — Legitimate interest / Meşru menfaat
We will NOT use your personal data for purposes other than those stated above without obtaining your explicit consent.
5.1 We Do NOT Sell Your Data
We do not sell, rent, or trade your personal data to any third party for marketing or any other purpose.
5.2 Third-Party Service Providers
We may share data with the following categories of service providers, solely for the purpose of operating our Platform:
• Google — Authentication (OAuth 2.0) — Account auth tokens
• Stripe — Payment processing — Transaction data (card info handled directly by Stripe)
• Hosting — Server infrastructure — Encrypted data in transit and at rest
5.3 Additional Third-Party Services
We may integrate additional third-party services in the future to enhance Platform functionality (e.g., analytics, customer support, notification services). When such services are added, this Privacy Policy will be updated accordingly.
5.4 Legal Disclosures
We may disclose your data if required by law, court order, or governmental authority, or when necessary to:
• Comply with legal obligations
• Protect and defend our rights or property
• Prevent fraud or security threats
• Protect the personal safety of users or the public
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy:
• Account data: Retained while your account is active and for up to 12 months after account deletion
• Transaction records: Retained for the period required by applicable tax and commercial laws (minimum 10 years under Turkish Commercial Law)
• Activity logs: Retained for up to 24 months
• Contact form submissions: Retained for up to 12 months
• Cookies and tracking data: See Section 7
Upon request for deletion, we will erase or anonymize your personal data within 30 days, except where retention is required by law.
We use the following types of cookies:
• Essential Cookies: Required for Platform functionality (e.g., session management, authentication, language preference). These cannot be disabled.
• Analytics Cookies: Used to understand how visitors interact with the Platform. These are only set with your consent.
You can manage cookie preferences through your browser settings. Disabling essential cookies may impair Platform functionality.
We implement appropriate technical and organizational measures to protect your personal data, including:
• HTTPS/TLS encryption for all data in transit
• Secure, httpOnly, SameSite cookies for session management
• Regular security patches and system updates
• Access controls and authentication mechanisms
• Database encryption and secure backup procedures
• Server infrastructure protected by firewalls and intrusion detection systems
While we strive to use commercially acceptable means to protect your data, no method of electronic transmission or storage is 100% secure.
Our servers are currently located in Turkey. If you access our Platform from outside Turkey, your data may be transferred to and processed in Turkey. For users in the European Economic Area (EEA), such transfers are conducted in accordance with GDPR requirements, utilizing:
• Standard Contractual Clauses (SCCs) where applicable
• Adequate data protection measures as required by law
10.1 Rights Under KVKK (Turkish Users)
Under the Turkish Personal Data Protection Law (KVKK), you have the right to:
a) Learn whether your personal data is being processed
b) Request information about data processing activities
c) Learn the purpose of processing and whether data is used in accordance with its purpose
d) Know the third parties to whom data is transferred
e) Request correction of incomplete or inaccurate data
f) Request deletion or destruction of personal data
g) Object to negative consequences arising from automated data analysis
h) Claim compensation for damages arising from unlawful data processing
10.2 Rights Under GDPR (EU/EEA Users)
Under the General Data Protection Regulation (GDPR), you have the right to:
a) Access — obtain confirmation of and access to your data
b) Rectification — correct inaccurate or incomplete data
c) Erasure ("Right to be Forgotten") — request deletion of data
d) Restriction — restrict the processing of your data
e) Data Portability — receive your data in a structured, machine-readable format
f) Object — object to processing based on legitimate interest
g) Withdraw Consent — withdraw consent at any time
h) Lodge a Complaint — file a complaint with a supervisory authority
10.3 How to Exercise Your Rights
To exercise any of these rights, please contact us at: info@wowbox.life
We will respond to your request within 30 days. We may ask for identity verification before processing your request.
WOWBOX may host sub-projects suitable for all age groups, including children. We are committed to protecting children's privacy:
• We do not knowingly collect personal data from children under the age of 13 (or the applicable age in your jurisdiction) without verifiable parental consent.
• If you are a parent or guardian and believe that your child has provided personal data to us without your consent, please contact us at info@wowbox.life. We will promptly delete such data.
• Sub-projects directed at children will implement additional age-appropriate privacy protections.
We may update this Privacy Policy from time to time. When we make material changes:
• The "Last Updated" date at the top will be revised
• We will notify registered users via email or platform notification
• Continued use of the Platform after changes constitutes acceptance
We encourage you to review this Privacy Policy periodically.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: info@wowbox.life
Website: https://www.wowbox.life
