Privacy Policy

The data controller responsible for your personal data is LevelJo, operated by Giray Sengonul, contactable at giraysengonul@gmail.com.

We collect and process the following categories of personal data:

• Identity Data: Full name, username, email address, profile photo (if provided).
• Account Data: Password (hashed), authentication provider information (e.g., Google OAuth).
• Learning Data: Course progress, quiz answers, code submissions, XP scores, completed courses, certificates earned, leaderboard ranking.
• AI Interview Data: Chat messages during interview simulations, voice input data (processed and discarded, not stored), selected topics, AI-provided scores.
• CV Data: All personal information you voluntarily enter into the CV Builder.
• Technical Data: IP address, browser type, device information, access timestamps, and usage analytics.
• Payment Data: Subscription status and billing history. Payment card details are processed exclusively by LemonSqueezy and are never stored on LevelJo servers.

Your personal data is processed for the following purposes:

• Service Delivery: To provide access to courses, track progress, calculate XP, issue certificates, operate the CV Builder and AI interview simulations.
  Legal basis: Performance of contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b))
• Account Management: To create and manage your user account, authenticate your identity, and process subscription payments.
  Legal basis: Performance of contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b))
• Platform Improvement: To analyze usage patterns, improve content quality, and enhance the user experience.
  Legal basis: Legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6(1)(f))
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
  Legal basis: Legal obligation (KVKK Art. 5/2-c; GDPR Art. 6(1)(c))

• Account & Learning Data: Retained for the duration of your account. Upon account deletion, personal data is permanently removed within 30 days, except where retention is required by law.
• AI Interview Data: Interview scores are retained in your profile. Chat histories are retained for the session duration and automatically deleted.
• CV Data: Retained until you delete it through your account settings or request deletion.
• Technical & Analytics Data: Retained in anonymized/aggregated form for up to 24 months for platform improvement purposes.
• Payment Records: Retained as required by applicable tax and accounting regulations (minimum 5 years under Turkish law).

• LemonSqueezy: Payment processing only. LemonSqueezy acts as Merchant of Record.
• Supabase: Cloud infrastructure provider for data storage and authentication services.
• Vercel: Hosting provider for the web application.
• Groq: AI model provider for interview simulations. Data is processed anonymously.
• We do not sell, rent, or share your personal data with any third parties for marketing or advertising purposes.

Under applicable data protection laws, you have the right to:

• Learn whether your personal data is being processed;
• Learn the purpose of processing and whether data is used in accordance with its purpose;
• Request rectification if your data is incomplete or inaccurate;
• Request deletion or destruction under conditions set out in KVKK Art. 7;
• Object to any result to your detriment arising from analysis of your data exclusively by automated means;
• Claim compensation for damages arising from unlawful processing of your data.

To exercise any of these rights, contact us at giraysengonul@gmail.com. We will respond within 30 days.

LevelJo uses essential cookies required for authentication and session management. We may also use analytics cookies to understand how the Service is used. You can manage cookie preferences through your browser settings.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), secure password hashing, and access controls. However, no method of electronic transmission or storage is 100% secure.

The Service is not intended for use by individuals under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

For all privacy-related inquiries, data protection requests, or to exercise your rights under KVKK or GDPR: