Draft — not legal advice. / Taslak — hukuki görüş değildir. Prepared from: PatronFinans EK-3 Art. 4 / 4.3 (https://patronfinans.com/abonelik-sozlesmesi); Kolay İK notice (https://kolayik.com/internet-sitesi-kvkk). Parallel.ai country from https://parallel.ai/terms-of-service; Serper checked at https://serper.dev/terms and https://serper.dev/privacy. Turkish counterpart:
alt-islemciler.tr.md.
Last updated: 2026-10-15 (draft)
Language
This text is published in Turkish and English. For users in Türkiye, the Turkish text prevails in case of conflict; for users outside Türkiye, the English text prevails.
Subprocessors
| Subprocessor | Purpose / data | Country |
|---|---|---|
| Contabo | Server hosting (application infrastructure) | Germany |
| Cloudflare (incl. R2) | CDN, DNS, security; R2: file/media objects only | US (Cloudflare, Inc.; global edge network) |
| MongoDB Atlas | Database: canvases and account data | Germany — Frankfurt (AWS eu-central-1) |
| Amazon Web Services — SES | Transactional email | Germany — Frankfurt (eu-central-1) |
| Paddle (Paddle.com Market Limited) | Merchant of Record / seller — payment, invoicing, tax, refunds | United Kingdom |
| OpenAI | AI inference (training off) | US |
| AI inference (training off) | US | |
| Anthropic | AI inference (training off) | US |
| xAI | AI inference (training off) | US |
| Serper | Web search (query text) | [[STUB: Serper country — no address on its official pages; only UK governing law stated]] |
| Parallel Web Systems Inc. (Parallel.ai) | Web search (query text) | US (San Francisco) |
AI providers: model training is turned off (opt-out enabled) with OpenAI, Google, Anthropic and xAI.
Transfer basis
Transfers outside Türkiye rely on KVKK Art. 9(4) standard contracts and, where the GDPR applies, on GDPR Chapter V safeguards.
Changes
Craft updates this list when subprocessors change and announces material changes in the Service or by email before they take effect, where possible.