YazitoPrivacy Policy
Last updated 4 September 2026. Written for the GDPR (EU/UK) and Türkiye's KVKK; the Turkish version is the KVKK disclosure.
1. Controller
[Full legal name], sole trader, [address], Türkiye. Contact: privacy@yazito.com.
2. The application collects nothing
Yazito processes your documents only on your computer. No feature, including OCR, redaction, signing, PDF/A and AI, sends document content, file names or usage data to us or to anyone else. Licence keys are verified offline; the application does not contact any server. The AI feature talks to a local model you install (Ollama); text leaves your machine only if you explicitly configure a remote endpoint.
3. Data processed when you buy a licence
| Data | Purpose | Legal basis (GDPR art. 6) | Retention |
|---|---|---|---|
| E-mail address, licensee name | Issue and deliver the key, re-send a lost key | 6(1)(b) contract | Life of the licence, then 10 years (commercial records) |
| Billing address and, in Türkiye, tax identity | Invoicing and tax | 6(1)(c) legal obligation | 10 years |
| Payment outcome, provider transaction id, amount | Accounting, refunds, disputes | 6(1)(c) and 6(1)(f) | 10 years |
Card details never reach us. Outside Türkiye, Paddle.com Market Ltd. (UK) is the merchant of record and an independent controller for the payment, invoicing and tax; see Paddle's privacy policy. In Türkiye, iyzico processes the card payment.
4. Processors and transfers
- Cloudflare (site, database, e-mail routing; EU data centres, standard contractual clauses)
- Resend (transactional e-mail, US, standard contractual clauses)
Data of buyers in Türkiye is not transferred to Paddle. Where data is transferred outside the EU/UK or Türkiye, we rely on the providers' standard contractual clauses.
5. Your rights
Access, rectification, erasure, restriction, portability and objection, and the right to complain to your supervisory authority. Write to privacy@yazito.com; we answer within 30 days. Invoice records under a legal retention period cannot be erased before it ends; everything else is deleted on request.
6. Cookies
Only the payment provider's technically necessary cookies during checkout. No analytics or advertising cookies, so no cookie banner.