KVKK Information Notice

1. Data controller

LEX PROXIMA STUDIOS LTD (registered in England and Wales, company number 15503490; address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom). Contact: info@prova.so

2. Personal data processed

• Visual data: the photo you upload to the widget and the try-on image generated from it.
• Transaction security and usage data: an anonymous session ID derived from browser information, the page address visited and widget interactions (open, try-on, like, add to cart and purchase events).
• Identity and contact (dashboard users): name, email address, ikas store name and ID.
• Customer transaction data (dashboard users): domains, plan, credit balance and credit history.

3. Purposes of processing

• Generating virtual try-on and scene change images.
• Providing merchants with try-on, like and sales analytics.
• Managing merchant accounts, credits and payments.
• Ensuring information security and preventing abuse.
• Meeting legal obligations and responding to requests.

4. Legal grounds

• Photos: your explicit consent given with the consent box in the widget (KVKK Art. 5/1).
• Widget usage data: our legitimate interests, provided they do not harm your fundamental rights and freedoms (Art. 5/2-f).
• Dashboard user data: the establishment and performance of a contract (Art. 5/2-c) and our legal obligations (Art. 5/2-ç).

5. Method of collection

Personal data is collected electronically, by automated or partly automated means, through the Prova widget on stores' product pages, the app.prova.so dashboard and the ikas integration.

6. Transfers

Personal data is transferred, limited to the purposes above, to our service providers: Appwrite (database and file storage), Wiro (AI image generation with OpenAI models), Stripe (payments), Google (account sign-in), ikas (store integration) and hosting providers. As the data controller is based in the United Kingdom and service providers' servers may be located abroad, data is transferred abroad in line with the procedures set out in Article 9 of the KVKK.

Data may be transferred to legally authorised public authorities on request, to the extent required by law.

7. Retention period

Photos are automatically and permanently deleted within 24 hours of upload. Generated try-on images are not stored on Prova's servers. Widget usage data is kept for as long as the related merchant account is open, and dashboard user data for as long as the account is open and for statutory retention periods.

8. Your rights under Article 11 of the KVKK

• To learn whether your personal data is processed and, if so, to request information about it,
• To learn the purpose of processing and whether data is used in line with that purpose,
• To know the third parties in Türkiye or abroad to whom data is transferred,
• To request correction of incomplete or inaccurate data,
• To request erasure or destruction of data under the conditions in Article 7 of the KVKK,
• To request that corrections, erasures and destructions be notified to third parties the data was transferred to,
• To object to a result against you arising from analysis exclusively by automated systems,
• To claim compensation for damage caused by unlawful processing.

You can withdraw your explicit consent at any time; withdrawal does not affect processing carried out before that date.

9. How to apply

Send your requests to info@prova.so together with information that verifies your identity. Because visitor records are kept under anonymous session IDs, telling us the store and the date of your try-on helps us find the record. Requests are concluded free of charge within 30 days at the latest.