Privacy policy

Who we are

Özgür Asar operates OzzyLab in Türkiye. For privacy questions or requests, contact ozgurasarstat@gmail.com.

Information we process

• Account and access: invite-code account identifiers and session information. Where Google sign-in is enabled, we receive a Google account identifier and verified email address; we do not receive your Google password.
• Subscription records: where payments are enabled, account-to-Paddle customer links, subscription identifiers, status, billing-period dates and course entitlements. Paddle processes card details; OzzyLab does not receive your full card number or security code.
• Learning and AI: progress and preferences may be stored in your browser. When you use AI support, your message, relevant conversation history and lesson context are sent through our server to Anthropic to generate a response. Do not submit sensitive personal information or confidential material.
• Support and technical data: information you email us, request metadata, IP addresses used for security and rate limiting, and operational logs such as account identifiers, errors and AI usage counts.

Why we use this information

We use information to provide account access and course features, fulfill subscriptions, respond to support requests, prevent misuse and maintain the service. Processing may be necessary to perform our agreement with you, meet legal obligations, or pursue legitimate interests such as service security. Where consent is required for a particular activity, we will request it separately.

Cookies and browser storage

Essential session cookies keep you signed in; sessions can last up to 90 days. Where Google login is enabled, a short-lived cookie protects the sign-in attempt. Browser storage supports learning progress, language preferences and chat state. You can clear it in browser settings, which may reset saved progress or end sessions. Third-party sign-in and checkout services also use their own cookies under their policies.

Service providers and international processing

We use Render for hosting, Anthropic for AI responses and, where enabled, Google for sign-in and Paddle for payments and subscription management. Information may be processed outside Türkiye, subject to the arrangements and safeguards applicable to each service. Providers process information under their applicable terms and privacy policies; some also act independently for their own services.

See Render privacy, Anthropic privacy, Google privacy and Paddle privacy.

Retention, security and your choices

We retain account, support and billing information for as long as needed to operate the service, resolve disputes and meet applicable obligations. Browser-held information remains until it is cleared or replaced. Provider retention is governed by the relevant provider's policies. Contact us to request access, correction or deletion; some records may need to be retained where required by law.

Depending on applicable law, you may also have rights to object, restrict processing, obtain a copy of your information or complain to a competent data-protection authority. We use access controls and secure transport, but no system is completely secure. Contact us about suspected account misuse or privacy issues.

Updates

We will update this page when our data practices change and provide additional notice where required.