Privacy Policy

This policy covers the Asoria app, the oriaverse.com website where you can talk to Asoria, the founder–investor network Nexoria, and the service behind them. The data controller is Oriaverse ("we"). For anything at all: help@oriaverse.com.

In short

We don't sell your data, we don't show ads, and we don't track you across other apps or websites.
Your sign-in details (your Apple or Google email) are only for signing in; no other user ever sees them.
Asoria builds your persona from what you write. Your data is not used to train AI models.
When personas talk to each other, no one's real messages are used.
Your location is shared only when you turn it on, only at the event venue and only with the people you choose.
You can delete your account from inside the app at any time; deletion is immediate and permanent.

1. What data we process

Data	When	Why
Sign-in details	At sign-up and sign-in, required	If you sign in with Apple or Google, that account's unique ID and your email address (with Apple, possibly a private relay address); if you continue as a guest, a digest of a random key created on your phone. To create your account, verify your sign-in and keep your account secure.
Your agreements	At sign-up, required	To keep proof that you accepted the terms and the explicit consent text and declared that you are over 18, with the date and text version.
First name; surname and date of birth	In your profile; first name required, the rest optional	To introduce you to other users. If you give your date of birth, it is used for the 18+ check and shown to no one.
Profile photo	Optional, only if you upload one	So you can be recognised when meeting in person. It doesn't affect matching. Hidden data inside the photo, such as location, is removed on upload.
Persona information	As you write it	What you do, what you are looking for, what you want to gain; the links you add and the public content of those pages; your introduction chat with Asoria; what your persona learns over time. To build your persona, calculate matches and explain them to you.
Event information	When you join an event	Event code, your ticket if there is one, your attendance, matches, match reasons and groups. To provide the service.
Messages and what you share	In chats	What you write to your matches, photos you send, your "on my way / I'm here" status, and notes you add about people that only you can see. To deliver them, prevent misuse and review reports; your text messages also for the AI processing in section 2 (photos and location are not sent).
Location	Only when you turn it on	Your live location while at the event venue, for the time and people you choose. To help you meet.
Conversations with Asoria	As you write to Asoria in the app	To answer your questions and improve your persona.
Purchase information	When you buy Premium or tokens	The transaction ID, product, date and subscription status the App Store or Google Play sends us; your token balance and history. The App Store or Google Play takes the payment; we never see your card details.
Notification token	If you allow notifications	To send notifications to your device. If you don't allow them, the app still works.
Reports and blocks	When you use them	Who you reported or blocked, the reason you chose and your note. To keep the community safe.
Technical and security data	Automatically	Session information, app version, server logs including IP address, and service usage measurements. To keep the service secure and working and to prevent misuse.

What we don't process

We don't use your contacts, your whole photo library (we only receive the photo you pick) or your microphone.
We don't track your location continuously in the background.
We don't use your advertising identifier; there is no analytics or advertising tracking in the app.

Special categories of data

We don't ask you for special categories of data such as health, religion, political opinions or sex life. If you share such information yourself in your persona texts or chats, it is processed only on the basis of your explicit consent and only to build your persona. We recommend not writing anything you don't want to share.

2. Artificial intelligence

Asoria is the artificial intelligence developed by Oriaverse. Asoria's AI processing runs on Google's (Google LLC) AI infrastructure, working on our behalf and on our instructions; for this, data is sent to Google's servers outside Türkiye. When you sign up, and before any data is sent, the app tells you clearly what is sent and to whom, and asks for your permission.

Data used in this processing: what you tell Asoria for your persona and your chats with the AI (Asoria, scenarios, practice sessions); public information from the links you add; your persona details needed for simulated conversations between personas and for match reasons; when you open the chat coach or ask Asoria, the latest messages of the related chats; after an event, your chats from that event, so your persona can learn from you and Asoria can draft follow-ups (the other person's messages are used only as context); what you write to Asoria on this website.
Data not used: your sign-in details, date of birth, IP address, location and photos.
No training: our infrastructure providers may not use your data to train or improve their models. We don't use your data to train models without asking you separately.
No real messages: when personas talk, only persona information is used; your real messages and other people's never enter these conversations.
Suggestions, not decisions: match suggestions, scores, reasons and simulated conversations are AI estimates and can be wrong. No automated decision with legal or similarly significant effects is made about you; you decide whom to meet.

3. Who sees what

Other users (people at the same event or your matches): your first name, your photo if you added one, your persona name and icon, what you do and what you are looking for, the links you added, and the match reason. Before matches open, only your initials are visible. Your location is visible only to the people you share it with, for the time you choose.
Shown to no one: your sign-in details, date of birth, your persona's inner information, your conversations with Asoria and the notes you add about people.
Event organisers: attendance information (who joined, ticket use) and non-personal aggregate numbers. They can't see your messages or your persona.
The Oriaverse team: only a small number of authorised people, only when needed to run the service; the relevant messages when a report is being reviewed.

We don't sell your data and we don't share it with advertising networks. To provide the service we work only with these kinds of service providers:

AI infrastructure provider (Google LLC): the data listed in section 2, for persona, matching and Asoria's replies.
Hosting providers: servers, database and files; all service data.
Notification service providers: your notification token and the notification text.
The app store: for purchases and payments. The store is a separate data controller for payments, under its own privacy policy.

These providers process your data only on our instructions and only for this service, and are contractually committed to protect it at least as well as this policy does. Other than that, we disclose data only when legally required, to competent authorities and courts, and only as far as necessary. In a merger or acquisition, data may pass to the acquiring party on condition that it stays bound by this policy; we would announce this in advance.

5. International transfers

Our servers and some of our service providers are located outside Türkiye (in the European Union and the USA), so your data is transferred abroad. Transfers are made in line with Article 9 of Turkish Law No. 6698, using the standard contracts published by the Personal Data Protection Board and notifying the Board; in incidental cases where that isn't possible, they rely on your explicit consent.

6. How long we keep it

Data	Period
Account, profile, photos, personas, matches, messages, notes, token balance	Until you delete your account. If you delete a persona, its information is deleted.
Matches you didn't message after an event	Removed from your list 15 days after the event; deleted with your account.
Location	Only your latest position, for a short time; deleted when sharing or the event ends.
Your conversations with Asoria in the app	180 days.
Service usage measurements	1 year; unlinked from you when you delete your account.
Purchase records	For the period required by tax and commercial law; kept only for that obligation even if you delete your account.
Report and moderation records	1 year after the review ends, for possible disputes and repeated violations.
Server logs (including IP address)	For security and for the period required by law.

7. Permissions and withdrawing consent

Phone permissions: location (only while using the app), photos (only the photo you pick), camera (to take photos in chat) and notifications. None is required; if you don't allow one, only the related feature won't work. Without location, you meet using a meeting point and "on my way / I'm here". You can turn permissions off at any time in iOS Settings → Asoria.
Location sharing: can be turned off instantly inside the app with one tap.
Persona: you can delete your persona and start over.
Explicit consent: you can withdraw your explicit consent at any time: just write to help@oriaverse.com or delete your account. Withdrawal doesn't affect processing done before it.

8. Deleting your account

In the app: Settings → Delete my account. Deletion is immediate and permanent: your account, profile, photos, personas, matches, messages, token balance and sessions are deleted. Because Premium runs through the App Store or Google Play, deleting your account doesn't cancel it automatically; cancel it on iPhone in iOS Settings → your name → Subscriptions, on Android in Google Play → Profile → Payments & subscriptions → Subscriptions. Details, and what to do if you can't open the app: Delete account.

9. Your rights

Under Article 11 of Turkish Personal Data Protection Law No. 6698, you have the right to:

learn whether your personal data is processed and, if so, request information about it,
learn the purpose of processing and whether it is used accordingly,
know the third parties in Türkiye or abroad to whom it is transferred,
request correction if it is incomplete or inaccurate,
request deletion or destruction and that these actions be notified to the parties it was transferred to,
object to a result against you arising solely from automated analysis,
claim compensation if you suffer damage from unlawful processing.

Send your request to help@oriaverse.com with the email address linked to your account; we may send a confirmation email to that address to verify your identity. Requests are free and answered within 30 days at the latest. If you aren't satisfied with our answer, you can complain to the Turkish Personal Data Protection Board. More detail: KVKK Privacy Notice. If you are in the European Economic Area, you can write to the same address to exercise your GDPR rights (access, rectification, erasure, restriction, portability, objection and complaint to a supervisory authority).

10. Security

All connections are encrypted. We apply access restrictions and other technical and organisational measures to protect your data; only authorised people can access it. No system is flawless; if a data breach occurs, we notify the Board and the people affected as the law requires.

11. Age limit (18+)

Asoria is not for people under 18. If we learn that someone under 18 has an account, we delete the account and its data. If you notice such a case, please write to us.

12. On this website

Chatting with Asoria: what you write in the chat box and Asoria's replies are generated with the AI infrastructure described in section 2, stored to improve the service and prevent misuse, and can be read by the Oriaverse team.
Contact details: if you give Asoria your email address and event details for an event, a collaboration or press, they are stored so our team can get back to you.
Waitlist: if you join the waitlist on the site, your email address is stored so we can tell you when our new product opens.
Visit data: how far into the scenes you got, which site you came from, device type, screen size and language. A random visitor ID and your language choice are kept in your browser. Your IP address is not stored, only an irreversible hash of it. No cookies, no ad tracking.
Fonts: the site loads its fonts from an external font service, which receives your browser's IP address.
Periods: chat and visit records are deleted automatically after 180 days. Contact details and waitlist entries are kept until their purpose is fulfilled or you ask us to delete them.

13. Nexoria

The founder–investor network at oriaverse.com/nexoria is also covered by this policy. Details are in section 9 of the KVKK Privacy Notice; in short:

What we process: your account (email, password hash, two-step sign-in), your application and profile (for founders the startup details and deck, for investors the organisation and thesis), your persona, match reports and rehearsal conversations, meeting times, token history, billing details and, for an investor's earnings payout, tax details and IBAN.
AI: personas, matching, reports and rehearsals run on the AI infrastructure described in section 2; we ask for your explicit consent for this separately at sign-up.
Who sees what: a founder's profile and deck (watermarked) are visible only to the investors they match with. An investor's name and organisation are not shown to a founder until the meeting request is accepted; after that both sides see each other's email, phone and LinkedIn.
Sharing: emails are sent through an email delivery service; once a meeting is confirmed, both sides' email addresses and the meeting time go to a calendar and video call service for the invite and the call link.
Security and retention: Turkish ID or tax numbers and IBANs are stored encrypted. Invoice, tax and payout records are kept for the period required by law; other network data until you delete your account.

14. Changes and contact

We may update this policy; we announce significant changes in the app and ask for your consent again where needed. The current version is always at this address. Questions: help@oriaverse.com.

Note: this is an English translation provided for convenience; if it differs from the Turkish version, the Turkish version prevails.