Privacy Notice
Data controller
ServiceBox is a service of Passionitech Inc FZE. Data controller: Passionitech Inc FZE ("ServiceBox"), Business Center, Coworking, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates. It processes the personal data of users in Türkiye as data controller under Turkish Law No. 6698 on the Protection of Personal Data (KVKK), and of users in the European Economic Area under the EU General Data Protection Regulation (GDPR).
Data we process
Name, email and company provided at signup; API request logs, IP address and billing records generated while using the service.
Purposes and legal bases
Providing the service and performing our contract with you (KVKK art. 5/2-c; GDPR art. 6(1)(b)); billing and legal obligations (KVKK art. 5/2-ç; GDPR art. 6(1)(c)); security, preventing abuse and enforcing usage limits (legitimate interest; KVKK art. 5/2-f; GDPR art. 6(1)(f)); ad measurement only with your consent (KVKK art. 5/1; GDPR art. 6(1)(a)). Your data is never sold to third parties for marketing.
Retention
Account data is kept for the life of the account and deleted within 30 days of account closure. API request logs are kept for 12 months; billing records for 10 years as required by law.
Transfers abroad
The data controller is in the United Arab Emirates. To provide the service, your data is stored with our database provider in the European Union (Frankfurt); hosting and email run on Cloudflare and payments on Stripe. These transfers are necessary to set up and perform the service. If you consent to ad measurement, data about your visit is transferred to OpenAI (United States) and Google (Google LLC, United States) on the basis of that consent; without it, Google receives only the cookieless signals described above.
Cookies and ad measurement
We use no cookies beyond what the site needs to work; preferences such as theme and language stay in your browser. To measure how our ads perform we load OpenAI's ads pixel only if you choose "Accept" in the cookie banner (consent). The Google Ads tag runs on every page in Google's consent mode: unless you choose "Accept" it neither sets nor reads cookies and it redacts ad click identifiers; Google receives cookieless signals only (IP address, browser details, the page visited, the time), which it uses to estimate conversions in aggregate. If you accept, the OpenAI pixel and the Google tag send online identifiers about your visit (cookies, IP address, browser details, the page visited) and conversions such as signing up and starting a subscription to OpenAI and Google. We do not use the Google tag for personalised ads (remarketing) or analytics. You can withdraw consent at any time with "Cookie settings" at the bottom of the site; rejecting does not affect your use of the site.
Your rights
Under KVKK art. 11 you may learn whether your data is processed, request information, correction or deletion, learn the third parties it is transferred to, object, and claim compensation; under GDPR arts. 15–21 you may access, correct and delete your data, restrict its processing, receive it in a portable form, object, and withdraw your consent at any time. Submit requests from the dashboard or via kvkk@servicebox.io; we answer within 30 days. You may also complain to the Personal Data Protection Authority in Türkiye or to the data protection authority of your country in the EU.
Contact
Passionitech Inc FZE · Business Center, Coworking, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates · kvkk@servicebox.io