1. Who we are
Miaveo is an AI website builder and hosting service operated by Miaveo (Davutpaşa mahallesi 52. sokak). This policy explains which personal data we process when you use it. You can reach the data controller at [email protected].
2. What we process
- Account data: your email address, your password (stored only as an irreversible hash) and, optionally, your name and phone number.
- Site content: the descriptions you write, the page content generated by AI and edited by you, uploaded photos and favicon, your domain and SEO settings.
- Visitor messages: the name, email and message sent through the contact form of your site. They are stored in your inbox and sent to your account email as a notification; for these, you are the data controller and we are your processor.
- Usage and security logs: IP address, browser information, sign-in attempts and error logs, used to prevent abuse and brute-force attacks.
- Payment data: when paid plans are available, payment is taken by the licensed payment institution PayTR. Your card details never reach or get stored on our servers.
3. Purposes and legal bases
- Creating your account and building and publishing your sites (performance of a contract).
- Keeping the service secure and preventing abuse (legitimate interest).
- Meeting legal obligations such as invoicing, accounting and requests from authorities (legal obligation).
- Optional cookies and measurement run only with your explicit consent (consent).
4. Who we share data with
We never sell your data. To run the service we share it, only as far as necessary, with:
- Google (Gemini): the description you write and the current page content are sent to the AI model to generate or edit your site. Please do not enter personal data, ID numbers or passwords in those fields.
- Cloudflare: sits in front of our services, relays traffic and issues SSL certificates for custom domains. It processes visitors' IP addresses while doing so.
- Hosting provider: our servers are in European data centres (Hetzner).
- Resend: sends our service e-mails (password reset links, notifications of messages sent through your site's contact form). It processes the recipient's email address and the content of the e-mail while doing so.
- Unsplash and Pexels: only English keywords are sent to find stock photos.
- PayTR: when taking payments (once the payment integration is live).
- Authorities: where the law requires it.
5. Transfers abroad
Some providers process data outside Türkiye (in the EU and the USA). Transfers follow Article 9 of Law No. 6698 and related rules; details are in the KVKK Notice.
6. Retention
We keep your data while your account is open. When you delete your account in Settings, your account, sites, pages, messages, uploaded files and custom-domain records are deleted immediately and permanently. Copies in backups disappear when the backup cycle rolls over. Invoicing and accounting records are kept for the legally required period.
7. Your rights
You can download a copy of your data (Settings > Download my data), delete your account, correct your details and exercise your other rights under KVKK Article 11. Write to [email protected] (KEP: Şirketleşme aşamasındadır).
8. Cookies
Strictly necessary cookies (session, language, sidebar state and your cookie choice) are needed for the service to work and need no consent. Non-essential cookies and measurement tools switch on only if you choose "Accept all". You can change your choice at any time with "Cookie settings" in the page footer.
9. Changes
If we update this policy we change the date on this page and announce important changes.