Privacy Policy

1. Who We Are

Geotechnical Insights Hub is an educational geotechnical engineering platform published from the Republic of Türkiye. For privacy and data subject requests, please use the Contact page.

2. Data We Collect

No general file uploads. The website does not provide a feature to upload documents, borehole logs, or attachments. We only process data you enter into forms and fields, plus technical data needed to run the Service.

Use neutral labels. Project names, borehole identifiers, and similar fields are optional labels to help you organise records inside the application. Do not enter confidential client names, exact site addresses, contract codes, or other sensitive identifiers there unless you accept the risk of processing and storage as described here.

• - Account data: email address, authentication user ID, and login/session metadata through Supabase Auth.
• - Project and engineering inputs: project names, borehole identifiers, sample depths, and numeric or text fields you enter when using account project tools (for example user-entered N values). You are responsible for not submitting special categories of personal data or third-party personal data except where you have a lawful basis.
• - Tool records: selected tool outputs if you choose to save results to a project.
• - Contact data: name, email, subject, and message content submitted via the contact form.
• - Technical data: browser/device diagnostics, page requests, and local preferences (for example selected unit system and active tool/project selections in local browser storage).

3. How We Use Data

• - To create and secure accounts.
• - To provide tool functionality and save user project/borehole records.
• - To respond to contact requests and support messages.
• - To maintain platform security, stability, and misuse prevention.
• - To improve product quality and reliability.

4. Legal Bases (KVKK and International Practice)

Under KVKK, processing may rely on conditions such as: establishment or performance of a contract, legal obligation, legitimate interest (where not overridden by your interests), explicit consent where required, or other bases set out in the law. Where GDPR or other regimes apply to certain users, comparable concepts (contract, legitimate interests, consent, legal obligation) may apply in parallel.

• - Contract: to provide account and platform features you request.
• - Legitimate interests: to secure, operate, and improve the website.
• - Consent: where required for optional communications or specific processing.
• - Legal obligation: where disclosure is required by law.

5. Cookies and Local Storage

Authentication and essential security/session mechanisms may use cookies or equivalent browser storage. Some functional preferences (such as selected units or active tool selection) are stored locally on your device for usability.

6. Service Providers and Data Sharing

We use trusted third-party processors to operate the service. Typical providers include:

• - Supabase (authentication and database infrastructure).
• - Vercel (hosting and deployment infrastructure).
• - Resend (transactional email delivery, if enabled).

We do not sell personal data.

7. International Transfers

Infrastructure providers may process data in the European Economic Area, the United States, or other regions. Where personal data is transferred outside Türkiye, we rely on appropriate safeguards permitted under KVKK (such as the data importer's commitment to adequate protection, standard contractual clauses, or other mechanisms required by law) and contractual security requirements.

8. Data Retention

We retain data only as long as needed for account services, support, security, legal compliance, and legitimate business records. You can request deletion of your account from the account privacy section.

9. Your Privacy Rights

If you are located in Türkiye or your data is processed under KVKK, you may exercise rights under Law No. 6698, including (where applicable) the right to learn whether your personal data is processed, to request information, to obtain a copy, to request correction or deletion, to object to outcomes exclusively produced by automated processing, to request data portability, to claim compensation for unlawful processing, and to lodge a complaint with the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurulu).

Users in other jurisdictions may have comparable rights under local law.

• - Access, correct, or delete personal data.
• - Restrict or object to processing in certain cases.
• - Data portability where applicable.
• - Withdraw consent where processing is consent-based.
• - Lodge a complaint with the competent supervisory authority.

10. Security

We apply reasonable technical and organisational measures appropriate to the nature of the Service (for example access controls, encryption in transit where supported by providers, and least-privilege practices). Because the Service is not intended for highly confidential engineering files or bulk uploads, you should not treat it as a classified or secure document repository. No internet transmission or storage system can be guaranteed 100% secure.

11. Children's Privacy

The Service is intended for professional and educational use by adults and supervised learners. It is not directed at young children for independent account registration. If you are a parent or guardian in Türkiye, please supervise minors' use of online services in line with applicable law.

12. Policy Updates

We may update this policy from time to time. Material changes will be reflected by updating the date below.

13. Related Legal Pages

Governing law and jurisdiction for use of the Service are set out in the Terms of Use. Please also review our Disclaimer.