Privacy Policy and Cookie Notice

Effective as of 21 October 2025.

This Privacy Policy ("Privacy Policy") explains how MirLeon AI Teknoloji A.Ş. ("MirLeon", "we", "us" or "our") collects, uses, stores, shares and protects the personal data we collect through the www.mirleon.ai website in particular, and through all of our digital platforms that link to this Privacy Policy (the "Service"), our social media accounts, our marketing and promotional activities, our events, our business development processes and our other communication channels.

Privacy Policy Contents

  • Personal information we collect
  • How we use your personal information
  • How we share your personal information
  • Your choices
  • Other sites and services
  • Security
  • International data transfers
  • Children
  • Changes to this Privacy Policy
  • How to contact us
  • Notice to United Kingdom users

Personal information we collect

Information you provide to us. The personal information you may provide to us through the Service or otherwise may include:

  • Contact information; for example, your first name, last name, email address, billing and mailing addresses, job title and company name, and your telephone number.
  • Communications with us, when you contact us through the Service, via social media or otherwise with your questions or feedback.
  • Marketing data, such as your preferences for receiving our marketing communications and details about how you engage with them.
  • Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Third-party sources. We may also obtain personal information from other sources, such as:

  • Public sources, such as government agencies, public records and other publicly available sources.
  • Marketing partners, such as joint marketing partners and event sponsors.

Automatic data collection. We, our service providers and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with our Service, our communications and other online services, such as:

  • Device data, such as your computer's or mobile device's operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area.
  • Online activity data; for example, the pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our marketing emails or clicked links within them.

Cookies and similar technologies. Some of our automatic data collection is carried out through cookies and similar technologies. For more information, see our Cookie Notice.

Data about others. Users of the Service may have the opportunity to refer friends or other acquaintances to us and share their contact information with us. Please do not refer anyone to us or share their contact information with us without their permission.

How we use your personal information

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Service delivery. We may use your personal information to:

  • provide, operate and improve our Service and our business;
  • facilitate your sending of invitations to people you want to join the Service;
  • communicate with you about the Service, including by sending announcements, updates, security alerts and support and administrative messages;
  • understand your needs and interests and personalize your experience with our Service and our communications; and
  • provide support for the Service and respond to your requests, questions and feedback.

Research and development. We may use your personal information for research and development purposes, including to analyze and improve our Service and our business. As part of these activities, we may create aggregated, de-identified or other anonymous data from the personal information we collect. We turn personal information into anonymous data by removing information that makes it personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve our Service and promote our business.

Marketing and advertising. We, our service providers and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes:

  • Direct marketing. To the extent permitted by law, we may send you MirLeon-related or other direct marketing communications. As described in the "Opting out of marketing communications" section below, you may choose to opt out of our marketing communications.
  • Interest-based advertising. We may work with third-party advertising companies and social media companies to display advertising on other online services and to promote our content. These companies may use cookies and similar technologies to collect information about your interaction over time across our Service, our communications and other online services (including the data described in the automatic data collection section above), and may use that information to serve online ads they think will interest you. This is called interest-based advertising. We may also facilitate interest-based advertising to these or similar users on other online platforms by sharing information about our users with these companies. You can find more information about your options to limit interest-based advertising in our Cookie Notice.

Compliance and protection. We may use your personal information to:

  • comply with applicable laws, legal requests and legal processes, such as responding to subpoenas or requests from government authorities;
  • protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims);
  • audit our internal processes for compliance with legal and contractual requirements or our internal policies;
  • enforce the terms and conditions that govern the Service; and
  • prevent, detect, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

With your consent. In some cases, such as where required by law, we may ask for your specific consent to collect, use or share your personal information.

How we share your personal information

We may share your personal information with the following parties and as otherwise described in this Privacy Policy or at the time of collection.

Affiliates. Our parent company, affiliates and subsidiaries, for purposes consistent with this Privacy Policy.

Service providers. Third parties that provide services on our behalf or help us operate our Service or business (such as hosting, information technology, customer support, email delivery, marketing and website analytics).

Advertising partners. Third-party advertising companies for the interest-based advertising purposes described above.

Professional advisors. Professional advisors such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services they provide to us.

Authorities and others. Law enforcement, government authorities and private parties where we believe in good faith it is necessary or appropriate for the compliance and protection purposes described above.

Business transferees. Acquirers and other relevant participants involved in business transactions (or negotiations and due diligence for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or part of the business or assets of, or equity interests in, MirLeon AI Teknoloji A.Ş. or our affiliates (including in connection with bankruptcy or similar proceedings).

Your choices

You have the following choices with respect to your personal information.

Opting out of marketing communications. To opt out of marketing-related emails, you may follow the opt-out or unsubscribe instructions at the bottom of the email or contact us. Please note that if you choose to opt out of marketing-related emails, you may continue to receive service-related and other non-marketing emails.

Do Not Track. Some internet browsers may be configured to send "Do Not Track" signals to the online services you visit. We currently do not respond to "Do Not Track" or similar signals. To learn more about "Do Not Track", please visit http://www.allaboutdnt.com.

Declining to provide information. We need certain personal information in order to provide certain services. If you do not provide the information we indicate is required or mandatory, we may not be able to provide those services.

Other sites and services

The Service may contain links to websites, mobile applications and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.

Security

We employ a number of technical, organizational and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.

International data transfers

We are headquartered in Ankara and may use service providers that operate in other countries. Your personal information may be transferred to Türkiye or other countries where privacy laws may be less protective than those in your country.

For more information about international data transfers from the United Kingdom, see 'Notice to United Kingdom users'.

Transfer of data abroad

MirLeon AI Teknoloji A.Ş. may make use of cloud computing, infrastructure, artificial intelligence, analytics, security and payment service providers established abroad in order to provide its services.

The transfer of personal data abroad is carried out within the framework of Article 9 of the KVKK (Turkish Personal Data Protection Law), the relevant secondary regulations and, for the United Kingdom, the provisions of the UK GDPR, using an adequacy decision, appropriate safeguards, standard contractual clauses or other transfer mechanisms provided for in the relevant legislation.

Children

The Service is not intended for use by children under the age of 16. If we learn that we have collected personal information through the Service from a child under 16 without the consent of the child's parent or guardian as required by law, we will delete it. We ask that parents or guardians with concerns contact us.

Changes to this Privacy Policy

We reserve the right to change this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service. Where required by law, we will also notify you of the changes by another means we believe is likely to reach you (such as by email or otherwise through the Service). Any changes to this Privacy Policy will take effect upon posting of the revised version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of the revised Privacy Policy indicates your acceptance of the revised Privacy Policy.

How to contact us

ODTÜ Teknokent Cozone
Mustafa Kemal Mah. Dumlupınar Bul. No: 280G İç Kapı No: 1260
Çankaya / Ankara 06530
Türkiye

1st Floor 31–33 High Holborn,
London, England, WC1V 6AX
United Kingdom

Rights under Article 11 of the KVKK

Under Article 11 of the KVKK, data subjects have the right to:

  • learn whether their personal data is being processed,
  • request information about it if it has been processed,
  • learn the purpose of the processing,
  • learn the third parties to whom the data is transferred domestically or abroad,
  • request correction of data that has been processed incompletely or inaccurately,
  • request its deletion or destruction,
  • request that corrections made be notified to third parties,
  • object to adverse outcomes arising from the analysis of data exclusively through automated systems,
  • request compensation for damages arising from unlawful processing.

Application procedure

Pursuant to Article 13 of the KVKK, data subjects may submit their requests;

  • in writing,
  • via a registered electronic mail (KEP) address,
  • with a secure electronic signature,
  • from their registered email addresses,
  • or by other methods determined by the Board,

to MirLeon AI Teknoloji A.Ş.

Applications are concluded free of charge within thirty (30) days at the latest. Where the charging of a fee is provided for by law, a fee may be requested in accordance with the tariff determined by the Personal Data Protection Board.

Notice to United Kingdom users

The information in this "Notice to United Kingdom users" section applies only to individuals in the United Kingdom ("UK").

Personal information. In this Privacy Policy, "personal information" is equivalent to "personal data" under UK data protection law, in particular the General Data Protection Regulation (EU) 2016/679 as it forms part of UK law ("UK GDPR").

Data controller. MirLeon AI Teknoloji A.Ş. is the data controller of your personal data processed under this Privacy Policy for the purposes of the UK GDPR.

Legal bases for processing your personal information. We only use your personal information as permitted by law. Our legal bases for processing the personal information described in this Privacy Policy are described below.

Purpose of processing (details of each processing purpose listed below are provided in the "How we use your personal information" section above).

For service delivery

Legal basis: Processing is necessary to perform the contract governing the provision of our services, or to take the steps you request before signing up for the services. Where we have not entered into a contract with you, we process your personal information based on our legitimate interest in providing the services you access and request.

For research and development, marketing and advertising purposes, compliance and protection purposes, and for the sharing of your personal information as described in this Privacy Policy.

Legal basis: These activities constitute our legitimate interests. We do not use your personal information for these activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

To comply with applicable law

Legal basis: Processing is necessary to comply with our legal obligations.

With your consent

Legal basis: Processing is based on your consent. Where we rely on your consent, you have the right to withdraw it at any time, in the manner indicated when you provide your consent or in the services.

Use for new purposes. We may use your personal information for reasons not described in this Privacy Policy where permitted by law and where the reason is compatible with the purpose for which we collected it. If we need to use your personal information for an unrelated purpose, we will notify you and explain the applicable legal basis.

Data retention. We retain personal information for as long as necessary to fulfill the purpose for which we collected it, including for the purposes of satisfying any legal, accounting or reporting requirements, establishing or defending legal claims, or for compliance and protection purposes.

To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and applicable legal requirements.

When we no longer need the personal information we have collected about you, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), we will securely store your personal information and isolate it from any further processing until deletion is possible. If we anonymize your personal information (so that it can no longer be associated with you), we may use this information indefinitely without further notice to you.

Sensitive personal information. We ask that you not provide us with any sensitive personal information (for example, social security numbers, information related to race or ethnic origin, political opinions, religion or other beliefs, health, biometric or genetic characteristics, criminal background or trade union membership) through the services or otherwise.

If you provide us with sensitive personal information when using our services, we will ask for your consent to the processing and use of that sensitive personal information under this Privacy Policy. If you do not consent to the processing and use of such sensitive personal information, you must not submit such sensitive personal information through our services.

Your rights. UK data protection law grants certain rights with respect to your personal information. If you are located in the UK, you may ask us to take the following actions in relation to your personal information that we hold:

  • Access. Provide you with information about our processing of your personal information and give you access to your personal information.
  • Correct. Update or correct inaccuracies in your personal information.
  • Delete. Delete your personal information.
  • Transfer. Transfer a machine-readable copy of your personal information to you or a third party of your choice.
  • Restrict. Restrict the processing of your personal information.
  • Object. Object to our reliance on our legitimate interests as the basis for processing your personal information where that processing affects your rights.

If you would like to submit any of the above requests, please contact us. We may request certain information from you to help us verify your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions. If you would like to make a complaint about our use of your personal information or our response to your requests regarding your personal information, you may contact us or lodge a complaint with the Information Commissioner's Office, whose details are provided below:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel. +44 303 123 1113
Website: https://ico.org.uk/make-a-complaint/

Cross-border data transfers. We may share your personal information with third parties established outside the UK. In such cases, the processing of your personal information by these parties will involve the transfer of your personal information outside the UK.

We seek to ensure that those with whom we share your personal information store it in accordance with the standards required by UK data protection law. Therefore, whenever we transfer your personal information outside the UK, we aim to ensure a similar level of protection by ensuring that at least one of the following mechanisms is applied:

  • Transfers to regions with an adequacy decision. We may transfer your personal information to countries or regions deemed by the UK Government from time to time to provide an adequate level of protection for personal information.
  • Transfers to regions without an adequacy decision.
    • We may transfer your personal information to countries or regions deemed by the UK Government not to provide an adequate level of protection for personal information (where applicable).

    This means that the relevant competent authorities have not made an "adequacy decision" confirming that the relevant laws and practices in that country or region are adequate to protect personal information in accordance with the standards required by the UK GDPR; for example, there is currently no such decision in relation to the United States.

    However, in these cases:

    • We may use certain appropriate safeguards approved by the UK Information Commissioner's Office or the UK Government (where applicable) in order to provide the same protection that personal information has in the UK; for example, by requiring the recipient of the personal information to sign the relevant form of the "Standard Contractual Clauses" as published or approved from time to time; or
    • In limited cases, we may rely on an exception or "derogation" that permits us to transfer your information to the country in question despite the absence of an "adequacy decision" or "appropriate safeguards"; for example, we may rely on your explicit consent to that transfer.

If you would like more information about the specific mechanism we use when transferring your personal information outside the UK, please contact us.

Cookie Notice

This Cookie Notice explains how MirLeon AI Teknoloji A.Ş. ("MirLeon", "we", "us" or "our") uses cookies and similar technologies.

  • mirleon.ai website and all other websites we own or control that post or link to this Cookie Notice (collectively, the "Sites").

What are cookies?

Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies serve a variety of purposes, such as helping us understand how a site is being used, allowing you to navigate efficiently between pages, remembering your preferences and generally improving your browsing experience.

Our Sites may use both session cookies (which expire when you close your web browser) and persistent cookies (which remain on your computer or mobile device until you delete them).

We divide cookies into two main categories: (1) first-party cookies, which are served directly by us to your computer or mobile device and are used to recognize your computer or mobile device when you revisit our Site; and (2) third-party cookies, which are served by service providers or business partners on our Site and can be used by these parties to recognize your computer or mobile device when you visit other websites. Third-party cookies can be used for a variety of purposes, including site analytics, advertising and social media features.

What types of cookies and similar tracking technologies does MirLeon use on its websites?

On our Site, we use cookies and other tracking technologies in the categories described below.

Type: Advertising

Description: These cookies are used by advertising companies to collect information about how you use our Sites and other websites over time. These companies use this information to show you ads they believe will be relevant within our services and elsewhere, and to measure the performance of ads.

Who serves the cookies:

How to control them: See the 'Your choices' section below.

Type: Analytics

Description: These cookies help us understand how our services perform and how they are used. These cookies may work together with web beacons included in the emails we send to track which emails are opened and which links are clicked by recipients.

Who serves the cookies: Google Analytics

How to control them: You can learn more about Google Analytics cookies here and about how Google protects your data here. You can block Google Analytics from using your Site usage information through a browser add-on that you can download and install here. See the 'Your choices' section below.

Type: Essential

Description: These cookies are necessary to ensure the technical operation of our services (for example, they enable you to navigate a website and use its features).

Who serves the cookies:

How to control them: See the 'Your choices' section below.

Type: Functionality / performance

Description: Enhances the performance and functionality of our services.

Who serves the cookies:

How to control them: See the 'Your choices' section below.

Mandatory cookies are necessary for the website to function and do not require explicit consent. Analytics, performance, functional and advertising cookies are used only after the user's explicit consent has been obtained, where required under applicable legislation. Users may change or withdraw their cookie preferences at any time through the cookie preference panel.

Other technologies

In addition to cookies, our Sites may also use other technologies such as Flash technology and pixel tags to automatically collect information.

Browser web storage

For purposes similar to cookies, we may use browser web storage (including via HTML5), also known as locally stored objects ("LSOs"). Browser web storage enables the storage of a larger amount of data than cookies. Your web browser may provide functionality to clear your browser web storage.

Web beacons

On our websites and in our HTML-formatted emails, we may use web beacons (also known as pixel tags and clear GIFs) to track users' actions on our websites and their interactions with our emails. Unlike cookies, which are saved to your computer's or mobile device's hard drive by a website, pixel tags are embedded invisibly in web pages or HTML-formatted emails. Pixel tags are used to indicate that a web page has been accessed or that certain content has been viewed; they are generally used to measure the success of our marketing campaigns or engagement with our emails and to compile statistics about the use of websites, so that we can manage our content more effectively.

Your choices

Your options for controlling what information cookies and similar technologies collect about you include:

  • Blocking cookies in your browser. Most browsers allow you to remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you set your browser to disable cookies, the Sites may not function properly. For more information about cookies, including how to see which cookies are set on your device and how to manage and delete them, visit www.allaboutcookies.org. If you do not accept our cookies, you may experience some disruption when using our Sites. For example, we may not be able to recognize your computer or mobile device, and you may need to log in each time you visit our Sites.
  • Privacy browsers/plug-ins. You can block tracking technologies using privacy browsers or ad-blocking browser plug-ins.
  • Platform settings. Google, Facebook and LinkedIn offer opt-out features that let you decline the use of your information for interest-based advertising:
  • Industry association opt-out. You can opt out of receiving interest-based advertising on member websites of the Network Advertising Initiative by clicking here, or of the Digital Advertising Alliance by clicking here. Please note that we may also work with companies that offer their own opt-out mechanisms and do not participate in the opt-out mechanisms linked above.

You will need to apply these opt-out settings on each device on which you want to opt out. Please also note that we may work with companies that offer their own opt-out mechanisms and do not participate in the opt-out mechanisms we have linked above.

To learn more about cookies, see which cookies are set on your computer or mobile device, and learn how to manage and delete them, visit www.allaboutcookies.org. If you do not accept our cookies, you may experience some disruption when using our Sites. For example, we may not be able to recognize your computer or mobile device, and you may need to log in each time you visit our Sites.

If you choose to opt out of targeted advertising, you will still see ads online, but they may not be relevant to you. Even if you choose to opt out, not all companies that offer online behavioral advertising are included in this list; therefore, you may continue to receive some cookies and personalized ads from companies that are not on the list.

For more information about how your personal information is collected, used and shared, see our Privacy Policy above.

Changes

Information about the cookies we use may be updated from time to time, so please visit this page regularly to check for any changes.

Questions

If you have any questions about this Cookie Notice, please contact us at the following email address: info@mirleon.ai

Last updated: 20 July 2026