Privacy Policy

Introduction

We respect your privacy and are committed to protecting your personal data while making document scanning easier. With this Privacy Policy (“Policy”), we explain how XStudios Bilisim Teknolojileri Reklamcilik Anonim Sirketi (“Xstudios”) collects and processes your information and personal data, the protection and privacy, and data security measures implemented, including your rights.

This Policy is applicable on CleanX website and social media platforms owned by CleanX (collectively “CleanX / Services / Website / App”).

Your access and use of CleanX is governed by this Privacy Policy and Terms of Use (“Terms”). The Terms apply to the definitions within this Policy and the provisions not included in this Policy. We recommend you to review the Terms of Use to be informed about the definitions, functions and features of CleanX.

By accessing or using CleanX, you agree to the collection and use of information and personal data in accordance with this Policy, and that you have reviewed and understood the processing of your information and personal data, including your rights. If you do not agree with the Terms or Privacy Policy, please do not use the Website, and/or the Services offered by CleanX.

Collection of Information and Processing Purposes

We may collect the following information and personal data when you access CleanX, upload and/or edit documents or otherwise utilize (“use”) the Website, and/or the Services:

Apple ID or Google Account

When downloading the app, your Apple ID or Google Account (depends on the platform that you are downloading the app from) is collected, and a user ID is assigned to recognize your profile, to record your subscription model, module permissions and communication preferences.

Contact Information

CleanX may process the e-mail address you have entered in the app in order to communicate with you, solve technical problems, and deliver CleanX's updates.

Technical Data

CleanX processes IP address, logs, device type and name, location, operating system, date of membership for the purpose of ensuring the functionality of the application, crash and error detection, conducting technical analysis, carrying out the activity in accordance with the legislation and technical data security.

Financial Information

CleanX processes subscription type and date, billing period for subscription management. Please note that we do not collect any credit card information.

Marketing Data

If you give CleanX permission, CleanX processes push notifications for marketing purpose, identifiers for advertisers designated in your mobile device used in accessing our services (The Identifier for Advertisers-IDFA), identifier for vendors/developers designated your mobile device (The Identifier for Vendors-IDVF), and Google Advertising ID (GAID), identifier for Firebase and Appsflyer analytics. These data are processed for marketing purposes, personalized advertising, personalized contents, targeting ads, enhancing personalized customer support, facilitating account management, and providing insights for product development.

Information Disclosed by You

You are deemed to have disclosed the contents and documents you uploaded or provided access to the app while using the CleanX, and the information and personal data included in these contents and documents (e.g. emails, photos, screenshots). You agree that you are authorized to process the personal data on the contents which CleanX processes to provide extra storage, eliminate duplicates, and boost device performance.

Please note that these contents are also protected within the scope of relevant legislation and adequate data protection measures.

Legal Grounds

While your account, contact information, technical data and financial information are processed due to the performance of contract and legal obligations; marketing data is processed upon your consent. Please note that you can withdraw your consent at any time.

Cookies

A cookie is a small text file stored on the user's device by a website to collect information about their browsing activity. We use two categories of cookies:

Technical & Functional Cookies: technical cookies, which are essential for a website's basic functions, and functional cookies, which enhance the user experience by remembering preferences and settings. Together, these cookies help improve app and website performance and personalization.

Please note that this category is automatically processed as you download the application, access the application and use the application or any of its modules.

Targeting & Performance Cookies: Performance cookies collect data on user interactions with a website, helping owners optimize functionality and improve user experience. Targeting cookies track user behavior across sites to deliver personalized ads, features and enhance marketing effectiveness.

Cookie preferences can be personalized and changed later, by using the search engine or your device.

Blocking and disabling cookies and similar technologies

You may set your browser to block cookies and similar technologies, but this could prevent our website from functioning properly, limiting your access to features and services. Blocking cookies may also erase saved information, such as scanned documents and preferences. Each browser offers different methods for managing cookies. Please note that disabling a cookie does not remove it and you must manually delete it from your browser.

Payment Methods

CleanX only collects billing information, payment method, subscription plan and billing cycle. By this way, we offer plans within payment to the user and to develop and update subscription plans. Your credit card and financial information are not processed by CleanX.

Age Restriction: CleanX has an age restriction as it is not intended for Users under the age of 13. If you are under 13 years of age, please do not use or access the App and Website at any time or in any manner. By using the App or Website, you affirm that you are over the age of 13.

Parent/Guardian Use: Parents and guardians are strongly encouraged to notify CleanX if their children under the age of 13 are using the app. Please note that CleanX does not collect information from children under the age of 13 in accordance with the Children's Online Privacy Protection Act (“COPPA”) as indicated in this Privacy Policy and the Terms.

Sharing of Information

Your personal data will not be sold, traded, or otherwise transferred to third parties for commercial purposes. Your data may be transferred for the reasons explained below:

Cloud and Mail Service Providers: We may share your data with cloud service providers and mailing services since we utilize third-party cloud service providers for data storage and processing, and we may share your data with mailing service providers to send you communications related to our services and updates. We use services for log-in and update purposes. Transfers to these service providers (Google / Gmail account or Apple account - whichever you chose to log in, Google, Firebase) are made in accordance with the data transfer rules and measures of the GDPR.
IT and Hosting Service Providers: We may share your personal information with our third-party service providers who use that information to help us provide our Services. This includes service providers (Google Cloud and Cloudflare) that provide us with IT support, hosting, payment processing, customer service, and related services.
Payment Service Providers: The payments are processed through to make subscription payments and in-app purchases (if available). We do not access or process the credit card information provided, and only access the subscription type and payment provider preference.
Advertising and Analytics Partners: As explained above, we use third party advertisement partners. We may share your IP address, cookie identifiers, and visited pages. These advertising partners (IDFA, IDFV, Appsflyer) may use this information for purposes of delivering personalized advertisements to you when you visit digital properties within their networks. This practice is commonly referred to as “interest-based advertising” or “personalized advertising.”
Legal, Tax and Financial Consultants: We may share your data with legal, tax and/or financial consultants for professional advice related to our operations, conducted in compliance with GDPR and limited to what is necessary.
Legal Authorities: We may disclose your personal data to legally authorized public institutions and government authorities in compliance with applicable laws, regulations, or decisions, including explicit regulations and administrative or judicial decisions mandating disclosure.

Anonymized Data: We may use anonymized data for analytical purposes. Anonymized data is processed in such a way that it can no longer be attributed to a specific individual, ensuring your privacy is maintained. Please review the Data Destruction and Anonymization heading for the process.

Rewarded Ads: Ads that do not belong to CleanX may be displayed within the scope of rewarded ads for users using the app without any subscription.. These ads may contain third-party links. We would like to remind you that when clicking or using these third party apps or sites, you are subject to their own privacy terms. We are not responsible for these websites and applications. Detailed information about rewarded names is available on Terms of Use.

Storage of Information

We are committed to ensuring that your personal data is stored securely and in compliance with applicable laws and regulations.

Retention Period: We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, and in accordance with the legal storage periods established by relevant regulations. Once the retention period has expired, we will take appropriate measures to securely dispose of or anonymize your data. Please note that we do not store your Google user data. Our use of the Gmail API complies with Google’s API Services User Data Policy, including the Limited Use requirements.

Access Control: Access to your personal data is restricted to authorized personnel who require this information to perform their job responsibilities. We implement strict access controls and security measures to safeguard your data from unauthorized access, use, or disclosure.

Data Destruction and Anonymization: When personal data is no longer necessary or the retention period has expired, we will either securely delete or destroy the data to prevent unauthorized access or retrieval, or we will anonymize the data. Anonymization involves processing the data in such a way that it can no longer be attributed to you, ensuring that it can be used for analytical or research purposes without compromising your privacy. Once data is anonymized, it is irreversibly altered and cannot be traced back to any individual.

Security Measures

We take the security of your personal data very seriously and implement measures to ensure protection as of the General Data Protection Regulation (GDPR). Our key principles include:

Safety Measures: Personal data is processed within the company only by authorized personnel, in a way that is not publicly accessible, and verification or additional confidentiality declarations required in processing special data categories if available. This also includes antivirus software, firewalls, secure logging.
Access Controls: Access to personal data is restricted to authorized personnel only, ensuring that only those who need to access your information can do so. As the third parties mentioned above access or process data, we implement data minimization, agreements with data protection measures, standard contractual clauses.
Regular Security Audits: We conduct regular audits and assessments of our security practices to identify and address potential vulnerabilities.
Sensitive Data: CleanX classifies user data according to its sensitivity, and applies enhanced protection for sensitive data, including encryption during storage and transfer, secure key management, and detailed access logging. Access is restricted through two-factor authentication, and potential threats are monitored in real time via our Information Security Threat and Event Management system (ISMS). Employees handling sensitive data are trained and bound by confidentiality agreements. Physical records are securely stored, and data backups are regularly maintained. Transfers of sensitive data via email are conducted encrypted in line with legal requirements.
Secure Development: CleanX follows a secure development lifecycle (SDLC) that includes secure coding practices, peer code reviews, and both static and dynamic vulnerability scanning before release. Security updates and patches are applied routinely. We also maintain internal documentation outlining the app’s technical architecture, network boundaries, and third-party SDKs to ensure alignment with recognized security standards.
Data Minimization: We only collect and retain personal data that is necessary for the purposes specified, and never process data outside the scope of above-listed purposes.
User Permission: The application asks for permission before accessing your media content or contact list on your device.
Incident Response Plan: We have established an incident response plan to quickly address any potential data breaches or security incidents.

While we strive to maintain a secure digital environment, yet no digital environment can be fully secure, we encourage users to take their own precautions when accessing and using the app, including utilizing relevant antivirus software, implementing a secure firewall, accessing the app over a safe Wi-Fi connection, and ensuring that the device used to access the app is secure and up to date.

In the event of any potential data breach or security incident, users are encouraged to inform Xstudios immediately. We will analyze the situation to determine if there is a security problem and take necessary measures to mitigate any risks. Your security and privacy are our top priorities, and we are committed to maintaining adequate standards of data protection as required by relevant legislation.

Corporate Affiliates and Sale of Business

We reserve the right to transfer information to a third party in the event of a sale, merger or other transfer of all or substantially all of the assets of CleanX or any of its Corporate Affiliates. Please note that Corporate Affiliate means any person or entity which directly or indirectly controls, is controlled by or is under common control with CleanX, whether by ownership or otherwise. Any information relating to you that we provide to our Corporate Affiliates will be treated by those Corporate Affiliates in accordance with the terms of this Privacy Policy.

Rights Under GDPR

The General Data Protection Regulation No. 2016/679 (GDPR) establishes a comprehensive framework for the protection of personal data within the European Union and the European Economic Area. Under GDPR, users have the following rights regarding their personal data as data subjects:

Right to Access: Obtain confirmation and access to personal data being processed.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of personal data under certain conditions.
Right to Restrict Processing: Request limitation of data processing in specific situations.
Right to Data Portability: Receive personal data in a machine-readable format and transfer it to another controller.
Right to Object: Object to the processing of personal data, especially for direct marketing.
Rights Related to Automated Decision-Making: Not to be subject to decisions based solely on automated processing, unless certain conditions apply.

To exercise these rights, users must send an email or petition clearly stating the right they wish to enforce, along with their name and accurate contact details. A response will be provided within the legal time period.

California Residents

The California Consumer Privacy Act (CCPA) requires us to disclose categories of Personal Information we collect and how we use it, the categories of sources from whom we collect Personal Information, and the third parties with whom we share it, which we have explained above.

We are also required to communicate information about rights California residents have under California law. You may exercise the following rights:

Right to Know and Access. You may submit a verifiable request for information regarding the: (1) categories of Personal Information we collect, use, or share; (2) purposes for which categories of Personal Information are collected or used by us; (3) categories of sources from which we collect Personal Information; and (4) specific pieces of Personal Information we have collected about you.
Right to Equal Service. We will not discriminate against you if you exercise your privacy rights.
Right to Delete. You may submit a verifiable request to close your account and we will delete Personal Information about you that we have collected.
Right to request that a business that sells a consumer`s personal data, not sell the consumer`s personal data.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us. Please note that we do not sell the personal information of our users. For more information about these rights, please contact us.

Updates to Privacy Policy

We reserve the right to update this privacy policy at any time to reflect changes in our practices, legal obligations, or operational needs. Users are encouraged to review this policy regularly to stay informed about how we protect their personal data and to understand their rights and responsibilities. The revision date is stated in the introduction of the policy. Any updates will take effect immediately upon posting. If users do not agree with the amendments, they should discontinue using the app. Continued use of the app after such updates constitutes acceptance of the revised policy.

Contact

This privacy policy constitutes the entire understanding between you and us regarding the collection, use, and protection of your personal data. If you have any questions or concerns regarding this policy or our data practices, please contact us via [email protected]

XStudios Bilisim Teknolojileri Reklamcilik Anonim Sirketi

Çınarlı Mah. Ankara Asfaltı Cad. No:251-15 Konak/İzmir

[email protected]