Privacy Policy

We process the following data groups to provide our services:

• Account Information: Name, surname, email address, and password.
• Communication Data: Customer chats, support requests, and feedback.
• Corporate Data: Uploaded documents (PDF, TXT, etc.) and knowledge base content.
• Technical Data: IP address, device information, browser type, and usage metrics.

Daribase is a B2B (Business-to-Business) infrastructure provider for businesses (our Customers). Customers who integrate the Daribase platform into their websites or systems are considered the "Data Controller" under KVKK and GDPR for data they collect from their own visitors or consumers (End Users).

In this process, Daribase acts solely as a "Data Processor," operating only under our Customers' instructions for the purpose of providing AI services and running the system.

Any data shared by End Users (including contact information, health statements, financial requests, or other special category data) is under the direct responsibility of the Customer as Data Controller. Daribase does not use such data for its own purposes, does not sell it, and does not share it with third parties (including for training AI language models).

End Users' rights requests under KVKK or GDPR (such as data deletion, export, etc.) should be directed to the Data Controller (Customer) from whom they receive the service.

Daribase processes your data using RAG (Retrieval-Augmented Generation) technology. In this system, your data is provided to the AI as context but is not used for general training of models.

Data shared with AI providers (OpenAI, Google) is solely for real-time response generation, and these providers are restricted from training their models on your data.

Under data protection laws, you have the following rights:

• Access and information regarding your data.
• Request correction of inaccurate data.
• Request permanent deletion of your data from the system.
• Request restriction of data processing.