Scope
This policy covers getdraeva.com, offered under the DRAEVA brand. The mobile app is live on the App Store and Google Play; website login, membership and waitlist features are not currently active.
Website account and community features remain inactive. Contact delivery requires its email provider; background-removal processing remains unavailable until its image provider is configured. Rate limiting is not currently active.
Data controller and contact
The current privacy contact point for the website is DRAEVA. You may send privacy, access or deletion requests to info@getdraeva.com.
DRAEVA's final legal entity name and service address will be published here when the legal entity structure is completed. Website account creation remains closed; the contact interface does not report success unless its delivery provider is configured.
Data categories that may be processed
Data processing on the current website is limited.
- Technical access data: IP address, browser and device information, request time, visited route, error and security records that may be generated by the hosting infrastructure.
- Communication data: your name, email address, subject, message and information you voluntarily provide through the contact form or an email link.
- Consent and preference storage: your necessary and analytics category choice is stored under draeva_consent; a city you search may be stored on the same device to restore its weather recommendation on your next visit.
- Location and weather data: the homepage may request browser location permission when it opens; coordinates are accessed only if you allow it. Supplied coordinates are rounded to roughly 1 km precision, while a city name you enter may also be used to create the forecast. Coordinates are not saved to a DRAEVA account or database.
- Tool uploads: the background-remover interface creates a local browser preview; the inactive provider contract does not persist the image to disk, a database or object storage.
- The website currently has no active account creation, password collection or payment form.
Purposes and legal bases
Data may be processed to deliver the website securely, diagnose technical problems, prevent abuse, respond to communications and comply with legal obligations.
- Legal obligation, establishment or protection of a right, and legitimate interests that do not override fundamental rights, including the grounds under Article 5/2 of Türkiye's KVKK where applicable.
- Steps necessary to respond to your request or prepare for a future service relationship.
- Where a new feature requires consent, consent will be requested separately and freely before that processing begins.
Service providers and transfers
The website is hosted on Vercel. Vercel may process technical access data under its own infrastructure and policies for hosting, security and content delivery. If you contact us by email, our and your email providers may also process message data.
When you allow the homepage location request or ask for a location-aware weather and clothing recommendation, the city name or coordinates reduced to roughly 1 km precision are sent to Open-Meteo for the forecast and to BigDataCloud to determine the city name from coordinates. A saved city may refresh the recommendation automatically on a later visit; DRAEVA does not persist coordinates in its database or keep weather or reverse-geocoding requests in the server data cache.
GA4 loads only after explicit analytics consent. Resend is the intended contact delivery provider and Photoroom is the intended background-removal provider. Rate limiting is not active; a serverless-safe persistent limiter will be added if abuse or spam requires it.
Provider infrastructure may involve processing in other countries. Required transfer mechanisms, retention behavior and current provider details must be confirmed before inactive integrations begin processing data.
Retention and security
Data is retained only for the period required by its purpose, security needs and applicable legal obligations. Technical log periods may depend on hosting security settings; communications are not kept longer than reasonably needed after a request is resolved.
Reasonable technical and organizational measures are applied, but no internet transmission or storage method can guarantee absolute security.
Your data protection rights
Depending on applicable law, including Article 11 of the KVKK, you may request the following:
- Learn whether your personal data is processed and request information about that processing.
- Learn the processing purpose and whether data is used consistently with that purpose.
- Learn the third parties to whom data is transferred.
- Request correction of incomplete or inaccurate data and deletion or destruction where the legal conditions are met.
- Object to solely automated outcomes and request compensation for unlawful processing where applicable.
Changes
This policy may be updated as product features, providers or legal requirements change. Material changes will be shown by updating the date above and, where appropriate, providing an additional notice.