Privacy Policy

Data controller: Pallasite (operator of Palcore), Istanbul, Türkiye.

Product / service: Palcore (palcore.ai).

What we collect

• Email (required, to contact you)
• Lead type and role (founder/investor, founder/product/studio/other)
• Optional app description (max 500 chars)
• Language preference
• UTM parameters and referrer (if present)
• Browser user-agent and hashed IP for anti-abuse

What we don't store

• Raw IP (only SHA-256 hash, for anti-spam)
• Cookie-based analytics fingerprint
• Payment information
• Third-party trackers

How we use it

We use the data to assess your waitlist request, send waitlist / booking email, notify our internal lead channel, limit abuse, and understand product interest.

Legal basis

KVKK art. 5(2)(c) and 5(2)(f); GDPR Art. 6(1)(b) and 6(1)(f). Where required for booking or follow-up communication, we may also rely on your consent.

Retention

Waitlist records are retained for up to 12 months after the MVP1 launch; once a deletion request is verified, records are deleted or anonymized within a reasonable period.

Your rights

Under KVKK article 11, you may request confirmation of processing, access to processed data, correction of incomplete or inaccurate data, deletion or destruction where conditions apply, notification of those actions to third parties, objection to certain processing, and compensation where unlawful processing causes damage.

Where GDPR applies, you may also have rights to access, rectification, erasure, restriction, objection, portability, and complaint to a supervisory authority.

For requests: [email protected]

Processors

• Cloudflare (hosting, D1 database, KV rate limit, WAF / bot protection)
• Azure Communication Services (transactional email)
• Slack (internal lead notification)
• Google Calendar (only if you choose a booking slot)
• Plausible Analytics (cookieless, EU-hosted)

International transfer

The providers above may process data outside Turkey / the EU under their own infrastructure and contractual safeguards. Where this happens, transfer is limited by applicable contractual and technical safeguards.