Privacy Notice

1. Who is responsible

The data controller is Ali Telek, an independent engineer based in Türkiye. Contact: contact@firstout.ai.

This notice is written to meet the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK).

2. What is collected and why

Data	Purpose	Legal basis
Name, email, company, topic and message you send through the contact form or by email	To reply to your enquiry and prepare a proposal	Steps at your request before a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) and legitimate interest in answering enquiries (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f))
Technical data such as IP address, browser type and time of request	To deliver the site securely and protect it from abuse	Legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f))
Spam-protection check (Cloudflare Turnstile) on the contact form and the First Out AI key recovery form, when enabled	To stop automated spam	Legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f))
First Out AI licence record: email address, plan, seats, validity, Paddle customer, subscription and transaction references, member key labels	To issue, check and recover licence keys and to apply plan limits	Performance of the contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c))
First Out AI projects you choose to save on the server	To store and share your projects within your licence	Performance of the contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c))
Questions to the engineer sent from First Out AI: subject, question text, project reference, reply address, the answer	To answer the question and show the answer in First Out AI; to count the monthly allowance	Performance of the contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c))
First Out AI questions: the question, the inputs and engine result of the function it concerns, the answer, and token counts	To answer the question, show recent answers in First Out AI and count the monthly allowance	Performance of the contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c))
First Out AI calculation inputs	To return the result of a calculation; processed in memory and not stored	Performance of the contract, or for the Free plan legitimate interest (GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(c) and (f))

The site uses no analytics, advertising or tracking cookies. First Out AI keeps your working project and, if you enter one, your licence key in your browser's local storage on your own device; you can clear them at any time with your browser settings or the “Forget key” button.

Payment details are never seen or stored by firstout.ai. Purchases are processed by Paddle, which acts as merchant of record and as an independent controller for the payment, invoicing and tax data it collects under its own privacy notice.

3. Who processes it

Cloudflare, Inc. hosts the site, routes email sent to firstout.ai addresses, and provides the Turnstile spam check on the contact form.
Google LLC provides the mailbox where enquiries are received.
Cloudflare, Inc. also runs the First Out AI server, its database and the service that emails licence keys.
Anthropic, PBC provides the Claude model behind First Out AI and receives a question with the function it concerns only when a user asks one. Under Anthropic's commercial terms it may not train models on this content.
Paddle.com Market Limited and its affiliates (Paddle.com Inc for buyers in the United States, Paddle.com (Canada) Ltd in Canada) sell First Out AI plans as merchant of record and share with firstout.ai only what is needed to issue the licence: the buyer's email address, the plan and the order references.

These providers process data on servers that may be outside Türkiye and the European Economic Area, including in the United States. Transfers rely on the safeguards these providers offer, such as standard contractual clauses under GDPR and, for transfers from Türkiye, the standard contract procedure of KVKK Article 9.

4. How long it is kept

Enquiries and related correspondence are kept for up to three years after the last contact, unless a contract or a legal obligation requires longer. First Out AI licence records are kept while the licence is valid and for three years after it ends. Projects saved on the First Out AI server are deleted automatically 180 days after the licence ends, or earlier when you delete them. Questions to the engineer, First Out AI questions and their answers are kept with the licence record and deleted with it. Technical logs are kept by Cloudflare for the periods stated in its own policies.

5. Your rights

You can ask to access, correct or delete your personal data, to restrict or object to its processing, and, where it applies, to receive it in a portable format. Under KVKK Article 11 you also have the right to learn whether your data is processed, for what purpose, and to whom it was transferred.

Send requests to contact@firstout.ai. You will receive an answer within 30 days. You can also complain to your data protection authority, or in Türkiye to the Personal Data Protection Board (KVKK).