This Privacy Policy explains how ERASİS TEKNOLOJİ VE YAZILIM LİMİTED ŞİRKETİ (trading as Erasis AI) processes personal data when you use the erasis.ai website. It also serves as the information notice required under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and covers the information duties set out in Articles 13 and 14 of the EU General Data Protection Regulation (GDPR) where that regulation applies to you.
erasis.ai is a corporate information website. There is no sign-up, no user account, no login, no payment and no subscription on this site. We only process the information you actively send us through the contact form, the newsletter box or the live demo.
1. Data Controller
Data controller: ERASİS TEKNOLOJİ VE YAZILIM LİMİTED ŞİRKETİ (Erasis AI)
Address: AOSB 3. Kısım Mah. 40. Cad. No: 4, İç Kapı No: Z01, Döşemealtı / Antalya, Türkiye
MERSIS No (Turkish Central Registry): 0337085553000001
Email: info@erasis.ai
Website: erasis.ai
2. Personal Data We Process
There are three flows on this website that collect personal data. We do not ask you for anything beyond these.
2.1 Contact Form (/contact)
- Full name — required
- Email address — required
- Company name — optional
- Phone number — optional
- Subject — required; chosen from a fixed list (demo request, pricing, technical question, integration, beta programme, other)
- Message — required; the content is entirely up to you
This information is not written to any database on our website. When you submit the form it is turned into an email and delivered to info@erasis.ai, where it stays in our mailbox.
2.2 Newsletter Subscription (page footer)
- Email address — no other field is requested
Your subscription request is delivered to info@erasis.ai by email in exactly the same way.
2.3 Live Demo (/demo)
On the demo page you can upload a document to try out our document understanding capability:
- The document you upload (PDF, Word, Excel or an image file). The file is transferred to our server at
api.erasis.aito be analysed. - The fields extracted from the document (for example dates, amounts, party names). These are shown back to you on screen as the analysis result.
Important: The demo is a showcase environment, not a production system. We do not determine the content of the file you upload — if it contains personal data, it is you who put it there. For that reason we recommend that you do not upload documents containing real people’s personal data, special categories of data (health, criminal records and the like) or trade secrets. Please use sample documents whose content you have produced yourself.
The demo runs only when you actively pick a file and start the upload — not when you open the page. The viewer library that renders the document in your browser is served from our own domain; your document is not sent to any third party for display.
2.4 Automatically Generated Technical Records
As on any web server, standard access records (IP address, timestamp, requested address, browser and operating system information) may be generated on the infrastructure hosting this site. These records exist for the operation and security of the site; they are not used for marketing and are not processed to build individual profiles.
2.5 What We Do Not Process
- Payment or card details — no payment is taken on this site.
- Passwords — there are no accounts or logins.
- Location data.
- Advertising identifiers or behavioural tracking data.
3. Purposes and Legal Bases
| Data | Purpose | Legal basis (GDPR / KVKK) |
|---|---|---|
| Contact form data | Responding to your question, request or demo enquiry and carrying out the resulting commercial discussion | Steps taken at your request prior to entering into a contract (GDPR Art. 6(1)(b); KVKK Art. 5/2-c) and our legitimate interest in responding to enquiries (GDPR Art. 6(1)(f); KVKK Art. 5/2-f) |
| Newsletter email address | Sending you the newsletter and announcements you asked for | Your consent (GDPR Art. 6(1)(a); KVKK Art. 5/1) |
| Demo document and extracted fields | Demonstrating the product and showing you the analysis result on screen | Your consent (GDPR Art. 6(1)(a); KVKK Art. 5/1) |
| Server access records | Keeping the site available, troubleshooting, preventing abuse | Legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5/2-f) |
4. Recipients and International Transfers
4.1 EmailJS (outside Türkiye and the EEA)
The contact form and the newsletter box are delivered to us through a third-party email delivery service called EmailJS. EmailJS is based outside Türkiye and the EEA (in the United States), so submitting the form results in a transfer of your data abroad. The data transferred consists of the fields you filled in (name, email, company, phone, subject, message), or, for the newsletter, your email address only.
This transfer is a technically necessary part of getting your message to us. We rely on the explicit consent you give when submitting the form (GDPR Art. 49(1)(a); KVKK Art. 9). If you would rather not have your data transferred this way, do not use the form — write to us directly at info@erasis.ai instead. EmailJS privacy policy: emailjs.com/legal/privacy-policy.
4.2 Erasis AI Servers
A document you upload to the demo is transferred to our own server at api.erasis.ai for analysis. This is not a disclosure to a third party: the document is processed on our own infrastructure, is not used for any purpose other than the demo, and is not shared with third parties.
4.3 Other Disclosures
- We may share data with competent public authorities where they make a lawful request, limited to the scope of that request.
- We do not sell your personal data and do not share it with advertising networks or data brokers.
5. Cookies and Third-Party Trackers
This site uses no analytics, advertising or tracking cookies. There is no Google Analytics, no Meta pixel, no ad tag, no heatmap and no comparable tracking tool on the site.
The only cookie in use is functional:
NEXT_LOCALE— set by the site framework (next-intl) when you switch languages, so that your language preference (Turkish / English) is remembered. It serves no advertising or measurement purpose.
In addition:
- Web fonts (Inter) are served from our own domain; your browser does not make a font request to Google when you view the site.
- The site contains no maps, embedded videos or social media widgets. The LinkedIn link in the footer is an ordinary link — nothing is requested from LinkedIn unless you click it.
- The images, icons and background patterns used on our pages are served from our own domain as well. Your browser makes no request to any third-party server while you view the site.
6. Retention Periods
- Contact form messages: kept in our corporate mailbox. After your request has been dealt with, they are retained for a reasonable period so that the business relationship can continue and so that we can evidence what was agreed if a dispute arises; they are deleted once that need has passed.
- Newsletter records: kept until you unsubscribe.
- Demo documents: processed solely to run the demo, kept no longer than that purpose requires, and deleted on your request.
- Server access records: kept for as long as the technical and security purpose requires.
You can ask us to delete any of your data by writing to info@erasis.ai.
7. Your Rights
Depending on which law applies to you, you have the following rights in relation to your personal data:
- Access — to learn whether we process data about you and, if so, to obtain a copy and information about that processing (GDPR Art. 15; KVKK Art. 11).
- Rectification — to have inaccurate or incomplete data corrected (GDPR Art. 16).
- Erasure — to have your data deleted or destroyed (GDPR Art. 17; KVKK Art. 7).
- Restriction of processing (GDPR Art. 18).
- Data portability — to receive the data you provided in a structured, commonly used, machine-readable format (GDPR Art. 20).
- Objection — to object to processing based on our legitimate interests (GDPR Art. 21).
- Withdrawal of consent — at any time, without affecting the lawfulness of processing carried out before the withdrawal.
- Information about recipients — including third parties inside or outside the country to whom data has been transferred.
- Objection to automated decisions — to object to an outcome that affects you and results solely from automated analysis.
- Compensation — to claim damages if you suffer loss because your data was processed unlawfully.
7.1 How to Exercise Your Rights
- By email: info@erasis.ai — preferably from the email address you previously used to contact us.
- In writing: a signed letter sent or delivered to AOSB 3. Kısım Mah. 40. Cad. No: 4, İç Kapı No: Z01, Döşemealtı / Antalya, Türkiye.
Please include enough information for us to identify you. We answer requests as soon as possible and in any case within thirty days, free of charge. Where Turkish law applies and the request involves an additional cost, the fee set by the Turkish Personal Data Protection Board may be charged.
If we reject your request, if you find our answer insufficient or if we fail to answer in time, you may lodge a complaint with the Turkish Personal Data Protection Board (kvkk.gov.tr) or, if you are in the EEA, with the supervisory authority of your country of residence.
8. Data Security
These are the concrete measures we take:
- The site and all form submissions are transmitted over HTTPS (TLS).
- The credentials of the email delivery service are held server-side only and never appear in the code sent to your browser.
- Form data is not accumulated in a database on the website, which keeps the amount of stored data to a minimum.
- Access to our corporate mailbox is limited to the small number of staff who need it to do their job.
That said, no transmission over the internet can be claimed to be absolutely secure. The measures we take are reasonable ones, bounded by currently available technical means.
9. Children’s Data
erasis.ai is a corporate information website and is not directed at children. We do not knowingly collect personal data from children. If we become aware that a child’s data has reached us, we delete it without delay.
10. Changes to This Policy
We may revise this policy from time to time to reflect changes in the law or in how the site works. The current version is always published on this page and its effective date is shown at the top.