سیاست حریم خصوصی

Privacy Policy — English

Controller: Vandidad Group Gayrimenkul Danışmanlık Hizmetleri İthalat İhracat Ticaret Ltd. Şti., Konak, İzmir, Türkiye. Contact: ai@vandidad.xyz

A — Website and messaging assistant (vandidad.xyz, Telegram, Bale, WhatsApp)

What we collect: the text of the messages you send us; your name, business name, phone number and email only if you choose to give them; your messaging-platform conversation ID; a voice message if you send one (converted to text, the audio is not kept); the language of your message and the time of your last conversation; and your IP address in counter form only, solely to prevent abuse — it is not linked to your conversation and is discarded within two days.

Why: to answer you, to continue the conversation where it left off, and to contact you if you asked us to.

Where it is stored: Amazon Web Services, region us-east-1 (United States), in Amazon DynamoDB. The website itself is served through Cloudflare.

Who it is shared with: Amazon Bedrock (Anthropic Claude models) to generate replies; Amazon Titan Embeddings to search our own knowledge base; Amazon Transcribe only if you send a voice message; Serper.dev only when you explicitly ask for market research and have given contact details, and then only the search query is sent, never your conversation. If you use Telegram, Bale or WhatsApp, your messages also pass through their servers under their own policies. None of these providers are permitted to use your data to train their models.

Retention: for as long as your case file is open with us. On request, everything is deleted within 7 days. Abuse-prevention counters expire on their own within two days.

We do not sell your data, do not use it for advertising, and place no advertising cookies or third-party trackers on this site.

B — Instagram Direct assistant ("Hamzad")

This service runs on different infrastructure from section A and is therefore described separately. The two do not exchange data.

What we collect: the text of the direct message you send, the text of the reply, your numeric Instagram sender ID as provided by Meta, and the time of the message. No name, phone number or email address is collected separately — if you write one in a message it stays inside that message text. Photos, videos and voice notes sent in Direct are not processed or stored; this assistant reads text only.

Where it is stored: Cloudflare Workers KV, on Cloudflare's global network. Post images are held in Cloudflare R2.

Who processes it: the Google Gemini API generates the replies, so your message text is sent to Google — and Google may use content submitted to that service to improve its models. If you would prefer nothing be sent to Google, do not use this assistant; write to ai@vandidad.xyz instead. Cloudflare Workers AI is used only when that service is unavailable. Messages also pass through Meta's servers under Instagram's own policies.

Retention: everything expires on its own. Conversation history is kept for 60 days after the last message, and only the most recent 14 messages are retained. Message records kept for quality review expire after 120 days. The raw payload received from Instagram expires after 1 day. Earlier deletion on request, within 7 days — see Data Deletion.

Your rights

You may ask what we hold about you, ask us to correct it, ask us to delete it entirely (see Data Deletion), or ask us to stop contacting you. One email to ai@vandidad.xyz is enough; we respond within 7 days.

Children

These services are built for businesses and are not directed at anyone under 18. If we learn that we hold a child's information, we delete it.

Changes

If this policy changes, the date at the top of this page is updated, and we notify anyone who has given us contact details of any material change.