Privacy Policy

Data controller: Pallasite, Istanbul.

Product / service: Palcore (palcore.ai).

What we collect

• Email (required, to contact you)
• Role (founder/product/studio/other)
• Optional app description (max 500 chars)
• Language preference
• UTM parameters and referrer (if present)

What we don't store

• Raw IP (only SHA-256 hash, for anti-spam)
• Cookies or analytics fingerprint
• Third-party trackers

Legal basis

KVKK art. 5(2)(c) — formation and performance of contract; GDPR Art. 6(1)(b) — pre-contractual measure.

Retention

Waitlist records retained for 12 months after MVP1 launch; deleted immediately upon request.

Your rights

For access, rectification, or deletion: privacy@pallasite.net

Processors

• Cloudflare (CDN, captcha, KV) — EU region
• Neon (Postgres) — EU region (Frankfurt)
• Resend (email) — EU region
• Plausible Analytics (cookieless, EU-hosted)