Privacy Policy

Last updated: 23 September 2026

Dekor Sanat Reklam Dekorasyon San. Tic. A.Ş. ("we"), the company behind FuturistInk and FuturistCarve, respects your privacy. This policy explains which personal data we collect on futuristink.com, in the online trial studio, in your account and in the desktop software, why we collect it, who processes it on our behalf, how long we keep it and what rights you have. It is written to comply with Türkiye's Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).

1. Data we collect

  • Account data: name, e-mail address, hashed password and language preference. Accounts are managed in Amazon Cognito (AWS); we never see your password in clear text.
  • Billing and invoice data: plan, subscription status, payment history and invoices. For invoicing we record your name or company name, e-mail address and, for customers in Türkiye, tax office, tax number and address. Card details are entered directly with our payment provider iyzico and never reach our servers; for automatic renewals iyzico stores your card and gives us only a reference to it.
  • Licence and device data: a non-reversible identifier of each computer you sign in from, an optional device label, active-session information and the printer profiles you set up. We use these only to apply the two-computer / one-session rule of your subscription and to manage it.
  • Uploaded design data: images and projects you upload to the online trial studio are processed in cloud containers for the duration of your session and deleted when the session ends; we do not use them for any other purpose. 3D previews you choose to share by link are stored for 30 days and then deleted. Projects you create in the desktop software stay on your own computer; the software contacts our servers only to verify your subscription and check for updates.
  • Support and contact data: messages you send us via the contact form or e-mail, together with your name and e-mail address.
  • Technical data: server logs (IP address, time, requested page, browser type) needed to run and secure the service.
  • Site usage data: anonymous statistics from our own analytics, described in section 8.

2. Why we use it (legal bases)

  • To provide your account, subscription and licences (performance of a contract — GDPR art. 6(1)(b); KVKK art. 5(2)(c)).
  • To process payments, issue invoices and keep accounting records (legal obligation and contract — GDPR art. 6(1)(c); KVKK art. 5(2)(a) and (ç)).
  • To send transactional e-mails such as receipts, renewal reminders, team invitations and security notices (contract).
  • To secure the service, prevent abuse and enforce licence limits (legitimate interest — GDPR art. 6(1)(f); KVKK art. 5(2)(f)).
  • To reply to your enquiries (legitimate interest / consent).
  • To understand how the website is used and improve it, with our own privacy-friendly analytics (legitimate interest).
  • To measure and improve our advertising with marketing pixels — only with your consent (GDPR art. 6(1)(a); KVKK art. 5(1)).

3. Sub-processors & sharing

We share personal data only with service providers that process it on our behalf under data-processing agreements, and only as far as needed to run the service:

  • Amazon Web Services (AWS) — hosting, databases, authentication (Amazon Cognito) and transactional e-mail (Amazon SES); region eu-north-1 (Stockholm, Sweden).
  • iyzico — payment processing, 3-D Secure and card storage for automatic renewals (Türkiye).
  • Paraşüt — invoicing and pre-accounting (Türkiye): name or company name, e-mail address and, for customers in Türkiye, tax office, tax number and address.
  • Cloud container provider — runs the online trial studio (United States); processes the images and projects you upload for the duration of your session.
  • Advertising platforms (Meta, Google, TikTok, Microsoft, LinkedIn) — only if you accept marketing cookies; see section 8.

We do not sell your personal data and do not share it with anyone else, except where the law requires us to.

4. International transfers

Our primary infrastructure is in the EU/EEA (AWS, Stockholm) and our company is in Türkiye. Two processing activities take place in the United States: the cloud containers that run the online trial studio, and the advertising platforms that receive data if you accept marketing cookies. For these transfers we rely on your explicit consent and/or standard contractual clauses (and, under the GDPR, on adequacy decisions where they apply). Transfers from Türkiye abroad are made in accordance with KVKK art. 9.

5. Retention

We keep personal data only as long as needed for the purposes above:

  • Account, subscription and licence data: for as long as your account is active. After closure, or on request, we delete it unless we must keep it for the reasons below.
  • Invoices and accounting records: as required by the Turkish Tax Procedure Law and Commercial Code (VUK/TTK) — up to 10 years.
  • Server logs: 90 days.
  • Trial uploads: deleted at the end of your session. Shared 3D links: 30 days.
  • Support correspondence: for as long as needed to handle and document your request.

6. Your rights

Under the GDPR you may request access to your data, rectification, erasure, restriction of processing and data portability, object to processing based on legitimate interest, and withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Under KVKK art. 11 you have the right to: learn whether your personal data is processed; request information if it has been processed; learn the purpose of processing and whether the data is used in line with it; know the third parties in Türkiye or abroad to whom it is transferred; request correction if it is incomplete or inaccurate; request deletion or destruction under the conditions of KVKK art. 7; request that corrections, deletions or destructions be notified to the third parties to whom the data was transferred; object to a result against you produced by analysing the data exclusively by automated means; and claim compensation if you suffer damage from unlawful processing.

How to apply: send your request, with your name, contact details and the subject of the request, to support@futuristink.com from the e-mail address registered on your account, or in writing to our postal address below. We answer free of charge as soon as possible and at the latest within 30 days. We may ask you to verify your identity before acting on a request.

If your application is refused, answered insufficiently or not answered in time, you may lodge a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu). If you are in the EU/EEA, you may also complain to the supervisory authority of your country of residence.

7. Security

Passwords are stored only as salted hashes by our authentication provider. Licences are signed with keys held in a managed key service from which they cannot be exported. All connections are encrypted in transit (TLS), access to production systems is restricted to authorised staff, and card data never touches our systems.

8. Cookies, analytics & marketing pixels

Essential storage (no consent needed): your sign-in session, language choice, cookie-banner choice and analytics opt-out are kept in your browser's local storage. Nothing here is used for advertising.

First-party analytics (legitimate interest, no consent needed): our own script records page views, time on page, click positions (as a heat map), scroll depth, the referring site, browser language and your time zone, from which we derive an approximate country. It uses a random session identifier in local storage, sets no cookies, does not store your IP address and shares nothing with third parties. You can switch it off for this browser with the button below.

Marketing pixels (consent only): Meta Pixel, Google Ads / Google Analytics 4, TikTok Pixel, Microsoft Advertising (Bing UET) and LinkedIn Insight Tag load only after you click "Accept all" in the cookie banner. They set cookies and send usage and conversion data to those providers (United States) so that we can measure and improve our ads. If you choose "Essential only", none of them is loaded.

You can change or withdraw your choice at any time: "Cookie settings" reopens the banner; "Disable analytics in this browser" turns off our first-party analytics on this device. Changes take effect on the next page you open.

9. Data controller & contact

The data controller responsible for your personal data is:

Dekor Sanat Reklam Dekorasyon San. Tic. A.Ş.

Ekşioğlu Mah. Kuran Kursu Cad. No:68A, Çekmeköy / İstanbul, Türkiye

Sarıgazi Tax Office, tax no. 2731342614 · MERSIS: 0273134261400001

Data protection enquiries: support@futuristink.com.