Privacy Policy

Landwait ("we," "us," or "our") is an AI-powered platform that helps you build and deploy landing pages using natural language prompts. This Privacy Policy explains how we collect, use, and protect your information when you use our website at https://landwait.com and related services (the "Service").

By using our Service, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

We are committed to protecting your privacy and complying with applicable data protection laws, including:

• KVKK (Turkish Personal Data Protection Law No. 6698) — as our primary governing law
• GDPR (EU General Data Protection Regulation) — for users in the EU/EEA
• UK GDPR — for users in the United Kingdom
• Other applicable privacy laws in jurisdictions where our users are located

2. Information We Collect

Information You Provide

• Account Information: Full name, email address, and password (encrypted)
• AI Chat Content: Messages and prompts you send to our AI assistant to build landing pages
• User Content: Landing pages, text, images, and other content you create
• Communications: Emails and support requests you send us

Information Collected Automatically

• Usage Data: Pages visited, features used, session duration
• Device Information: Browser type, operating system, screen resolution
• Behavioral Data: Click patterns, scroll behavior, session recordings (with sensitive data masked)
• Technical Data: IP address, timestamps, referring URLs

Payment Information

Payments are processed by Polar.sh (which uses Stripe). We do not store your payment card details.

Sensitive Personal Data

We do not intentionally collect sensitive or special categories of personal data, such as health information, religious beliefs, political opinions, biometric data, genetic data, or data concerning sexual orientation. Please do not submit such information through our Service.

3. How We Use Your Information

We process your information for the following purposes:

Legitimate Interest Explained

When we rely on "legitimate interest" as a legal basis, we have assessed that our processing is necessary for purposes that are not overridden by your privacy rights. These purposes include:

• Securing our platform and preventing fraud
• Analyzing aggregated usage patterns to improve our Service
• Ensuring the stability and performance of our infrastructure

You have the right to object to processing based on legitimate interest. Contact us at support@landwait.com to exercise this right.

4. AI Processing and Data Usage

How Our AI Works

Our AI assistant is powered by Google Gemini (paid tier). When you interact with the AI:

• Your messages are sent to Google's Gemini API for processing and response generation
• We use a paid tier, which means Google does not use your data to train their models
• Chat sessions are stored in our database to provide service continuity

For more information about Google's data practices, see Google's Privacy Policy.

Landwait's Use of Your AI Data

• Service Improvement: We may use anonymized and aggregated data from user interactions to improve our AI features and service quality
• No Individual Model Training: We do not use your individual prompts, projects, or content to train AI models that would benefit other users without your consent
• Your Content Remains Yours: The landing pages, content, and designs you create using Landwait belong to you

AI Output Disclaimer

The AI-generated content, code, and designs provided through our Service:

• Are generated based on your prompts and may not always be accurate, complete, or suitable for your specific needs
• May be similar to outputs generated for other users
• Should be reviewed and verified before use in production
• Do not constitute professional advice (legal, financial, medical, etc.)

You are responsible for reviewing and validating all AI-generated content before publishing or using it for your business purposes.

5. Cookies and Tracking

We use cookies and similar technologies to operate and improve our Service.

When you first visit our website, you will see a cookie consent banner where you can manage your preferences. You can change these preferences at any time.

• Microsoft Clarity automatically masks sensitive input fields (passwords, payment details) in session recordings.
• Google Analytics collects anonymized usage data. IP addresses are not stored in GA4.

Do Not Track

Our Service does not currently respond to "Do Not Track" (DNT) browser signals. However, you can manage your tracking preferences through our cookie consent banner.

6. Third-Party Services

We share data with the following service providers who process data on our behalf:

These providers process data under contractual agreements that require them to protect your information.

7. International Data Transfers

Your data is transferred to and processed in the United States by our service providers.

For transfers from the EU/EEA/UK, we rely on:

• EU-US Data Privacy Framework (where applicable)
• Standard Contractual Clauses (SCCs)

For transfers from Turkey, we comply with KVKK Article 9 requirements for international transfers.

8. Data Retention

When you delete your account, your data is permanently removed. Some data may remain in backups for up to 30 days.

9. Customer Responsibilities for End User Data

Your Role as Data Controller

When you use Landwait to create landing pages that collect information from your visitors ("End Users") through forms, email sign-ups, or other means, you act as the Data Controller for that data under applicable privacy laws (including GDPR and KVKK). Landwait acts as a Data Processor, processing End User data on your behalf according to your instructions.

Your Obligations

As a Data Controller, you are responsible for:

• Privacy Notice: Providing a clear and accessible privacy policy on your landing pages that explains what data you collect and how you use it
• Consent: Obtaining all necessary consents from End Users before collecting their personal data
• Legal Basis: Ensuring you have a valid legal basis for processing End User data
• Data Subject Rights: Responding to End User requests to access, correct, or delete their data
• Compliance: Ensuring your data collection practices comply with all applicable laws in the jurisdictions where your End Users are located

Our Role as Data Processor

As your Data Processor, Landwait:

• Processes End User data only according to your instructions and to provide the Service
• Implements appropriate security measures to protect End User data
• Assists you in responding to data subject requests upon your written request
• Deletes or returns End User data upon termination of your account

Lead Data

The information your End Users submit through forms on your landing pages ("Lead Data") is stored in your Landwait dashboard. You may export or delete this data at any time. When you delete your account, all Lead Data is permanently removed.

10. Ownership of Your Content

All landing pages, content, designs, and other materials you create using Landwait ("Your Content") belong to you. You retain all ownership rights and intellectual property rights in Your Content.

• You may use Your Content for any lawful purpose, including commercial purposes
• You may export Your Content at any time through your dashboard
• When you delete your account, Your Content is permanently removed from our servers

By using our Service, you grant Landwait a limited, non-exclusive license to host, display, and transmit Your Content solely to provide the Service to you. This license terminates when you delete Your Content or your account.

11. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent at any time (where applicable)

For Turkish Users (KVKK Madde 11)

KVKK kapsamında aşağıdaki haklara sahipsiniz:

• Kişisel verilerinizin işlenip işlenmediğini öğrenme
• İşlenmişse buna ilişkin bilgi talep etme
• İşlenme amacını ve amaca uygun kullanılıp kullanılmadığını öğrenme
• Yurt içinde veya yurt dışında aktarıldığı üçüncü kişileri bilme
• Eksik veya yanlış işlenmişse düzeltilmesini isteme
• Silinmesini veya yok edilmesini isteme
• Otomatik sistemlerle analiz sonucu aleyhinize çıkan sonuca itiraz etme

For California Users (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of personal information we have collected about you
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information
• Right to Non-Discrimination: Not be discriminated against for exercising your rights

We do not sell your personal information. We share data with service providers for business purposes as described in this policy.

How to Exercise Your Rights

Contact us at support@landwait.com. We will respond within 30 days.

12. Your Choices and Controls

Account Settings

You can manage your personal data through your account settings:

• Update your name and email address
• Change your password
• Delete your account and all associated data (one-click deletion available)

Communication Preferences

• Transactional Emails: Required for service operation (account confirmations, security alerts). These cannot be opted out.
• Marketing Emails: You can unsubscribe at any time via the unsubscribe link in emails or through your account settings.

Cookie Preferences

You can manage your cookie preferences through:

• Our cookie consent banner (shown on first visit)
• Your browser settings

Note that disabling certain cookies may affect website functionality.

13. Third-Party Links

Our Service may contain links to third-party websites, services, or applications that are not operated by us. We are not responsible for the privacy practices of these third parties.

We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies only to our Service.

14. Data Security

We implement appropriate security measures to protect your data:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest for sensitive data
• Secure password hashing
• Access controls and authentication
• Regular security assessments

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authorities within 72 hours of becoming aware of the breach (as required by GDPR)
• Notify affected users without undue delay when the breach is likely to result in high risk to their rights
• Document all breaches and remediation steps taken

15. Children's Privacy

Our Service is intended for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18.

In compliance with COPPA (Children's Online Privacy Protection Act), we do not knowingly collect personal information from children under 13. If we discover that we have collected personal data from a child under 13, we will promptly delete that information.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@landwait.com and we will delete it.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you by email or by posting a prominent notice on our website

For significant changes, we may request your acknowledgment before continuing to use the Service.

17. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights:

18. Supervisory Authorities

If you believe your privacy rights have been violated, you may lodge a complaint with:

• Turkey: Kişisel Verileri Koruma Kurumu (KVKK) — kvkk.gov.tr
• EU: Your local Data Protection Authority
• UK: Information Commissioner's Office (ICO) — ico.org.uk

19. Governing Law and Dispute Resolution

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Turkey, without regard to its conflict of law provisions.

For users located in the European Union, European Economic Area, or United Kingdom, nothing in this Privacy Policy affects your rights under mandatory consumer protection or data protection laws.

Any disputes arising from or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Istanbul, Turkey, unless otherwise required by applicable mandatory law.

20. Severability

If any provision of this Privacy Policy is found to be unlawful, void, or unenforceable under applicable law, that provision shall be deemed modified to the minimum extent necessary to make it enforceable, or if modification is not possible, deemed severed from this Privacy Policy. The remaining provisions shall continue in full force and effect.