Privacy Policy

Last updated: 12 October 2026

1. Data controller

The controller of your personal data is Cihad Paksoy, who provides usta.run as an individual based in Türkiye. Contact: cihadp@gmail.com.

2. What we collect

Account: your name, your email address and an irreversible hash of your password. If you sign in with Google, the name, email and profile picture Google shares.
Workspace content: the files you upload, your conversations with the assistant, your apps' records, your tasks and the services you connect. Secrets you save, such as a service's key, are stored encrypted.
Usage and spending: which app was called when, what was spent, and your workspace's activity log.
Payment: we never see your card details. From Lemon Squeezy we receive the order number, the amount, your email address and a receipt link.
Technical: session and language-preference cookies, and server logs (IP address, browser information).
Usage analytics and session recording: which pages and screens you open, your clicks, browser and device information, and a recording of the screen. The recording includes the inside of app windows, so content shown in those windows is recorded too. What you type into form fields is masked before it is recorded. If you are signed in, this data is linked to your account: your account id, name and email address.

3. How we use it

To provide the service and let the assistant do the work you ask for; to keep track of your balance and spending; to keep the service secure and prevent abuse; to see how the service is used so we can improve it and find faults; and to support you. We do not use your data for advertising and we do not sell it.

4. Who we share it with

Only with the providers we use to run the service, and only as much as they need:

Hosting and database: Vercel and Neon.
File storage: Vercel Blob.
AI models: what you write to the assistant, and the content it is working on at the time, is sent through Vercel AI Gateway to model providers so that a response can be produced.
Payments: Lemon Squeezy.
Sign-in: Google, if you sign in with Google.
Usage analytics and session recording: PostHog.
Services you call: when you use an app or the browser, the data the task needs (such as a search query or the page visited) goes to that service or site.

We may also share data with authorities where the law requires it.

5. International transfers

These providers may process your data on servers outside Türkiye, for example in the European Union and the United States.

6. How long we keep it

We keep your data for as long as your account is open. When your account is closed we delete it within a reasonable time, except payment records we are required by law to keep.

7. Your rights

Under Türkiye's Personal Data Protection Law (KVKK, No. 6698) and, where it applies, the GDPR, you have the right to access your data, to ask for it to be corrected, deleted or transferred, and to object to its processing. Write to cihadp@gmail.com to use any of them. You can also object to usage analytics and session recording without writing to us, with the switch in the Privacy section of the Account settings page. Once you object, we turn measurement off for your account entirely; from then on nothing is sent to PostHog from any page you open while signed in to it.

8. Cookies

We use the cookies the service needs to work: the one that keeps you signed in and your language preference. In addition, for usage analytics, PostHog stores an identifier that recognises your browser between visits, in a cookie and in the browser's local storage. We use no advertising cookies. Lemon Squeezy may use its own cookies when its payment window is open.

9. Children

The service is not intended for anyone under 18.

10. Changes

We may update this policy; significant changes are announced on the site.

11. Contact

For questions and requests: cihadp@gmail.com