Legal

Privacy Policy

Last updated: 8 October 2026

When we build a world for someone you love, you trust us with your most personal memories. This policy explains what data we process, why, and how. It follows Türkiye's data protection law (KVKK) and, for visitors in the EU/EEA and UK, the GDPR.

1. Who we are

Seller
ilyverse (individual seller, Türkiye)
Email
[email protected]
Website
ilyverse.com

2. What we collect

  • Account data: your email; if you sign in with Google, the name and profile information Google shares.
  • Contact data: the phone/WhatsApp number and Instagram username you choose to give.
  • Order data: who it's for, names, occasion and date, your dream text, the ideas and style you chose, the world's password, package and extras.
  • World content: the photos, videos, voice recordings and texts you send. These may include personal data of other people, such as the person you are gifting.
  • Transaction data: order and payment records. Your card details are handled by the payment provider; we never see or store them.
  • Reviews: your review, rating and the name you choose to show.
  • Technical data: basic records needed for the site to work, plus your language and theme preference (stored in your browser).

3. Why we use it (legal bases)

  • To design, build, publish and deliver your world, and to handle your order and payment (performance of a contract).
  • To contact you and support you (contract and legitimate interest).
  • To meet accounting and other legal obligations (legal obligation).
  • To publish your review on our site and, only if you also agree, on our social media (consent).
  • If content you send for your world includes special-category data (for example, a memory involving health), we process it only with your explicit consent and only for your world.

4. Other people's data

Worlds naturally include other people (the person you're gifting, family, friends). By sending their names, photos or voices, you confirm they know and agree. This data is used only for your world.

5. Your world stays private

Every world is password-protected, hidden from search engines and never listed anywhere. We never use its contents for marketing or as an example without asking you. The example worlds on our site use fictional people.

6. Who we share it with

Only the service providers we need, and only as much as they need:

  • hosting and database infrastructure (storing worlds and accounts),
  • authentication (Google sign-in and email links),
  • email delivery,
  • our payment provider.

Some of these providers may store data outside Türkiye or your country. Such transfers are made with appropriate safeguards as required by KVKK and the GDPR. We never sell your data or share it for marketing.

7. How long we keep it

  • World content is kept for as long as your world is online. When you ask us to delete it, we do so within 30 days unless the law requires us to keep it.
  • Order drafts that were never paid are deleted after at most 12 months.
  • Payment and accounting records are kept for the period required by law (usually 10 years in Türkiye).

8. Cookies and browser storage

We only use cookies and browser storage that the site needs to work: your language and theme preference and any order draft you haven't finished are stored in your own browser and are not sent to us. We use no advertising or tracking cookies. If we ever add something optional, such as visit statistics, we will only run it with your consent and update this policy.

9. Your rights

You can ask to access, correct, delete or export your data, object to or restrict its processing, and withdraw consent at any time. Write to [email protected]; we reply free of charge within 30 days. You also have the right to complain to Türkiye's Personal Data Protection Authority or, in the EU/EEA or UK, to your local data protection authority.

For buyers in Türkiye, the Turkish version of this text prevails.