Privacy Notice

Last updated: 12 November 2026

Who is responsible

Hacı Hüseyin Kuruosman, operating Staccordo, is the data controller for personal data processed through this website and service.

What we collect and why

• Account data (name, email address, profile picture from Google sign-in) — to create and secure your account (performance of contract).
• Service inputs and outputs (project name, goal, infrastructure choices, priorities, generated architectures) — to provide the service and show your history (performance of contract). Do not enter personal or confidential data in these fields.
• Plan and purchase records (plan status, subscription period, order identifiers) — to grant paid features (performance of contract, legal obligation).
• Support messages and Pro requests — to answer you (legitimate interests).
• Technical data (error reports, basic usage) — to keep the service secure and working (legitimate interests).

Website analytics

We use Lovable's visitor analytics. It uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify visitors. It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, and errors. This is recorded for every visitor, without cookies and without identifying anyone. Detailed data is kept for 90 days and daily summaries for a year. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

Sign-in storage

When you sign in, your browser stores a sign-in session so you stay logged in. This is essential for the service. The payment window, provided by Paddle, may set its own cookies when you open it.

Who we share data with

• Service providers: hosting and database (Lovable Cloud), sign-in (Google), and AI model providers that process your structured inputs to generate architectures.
• Paddle.com, our Merchant of Record, for the sale of products, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

International transfers

Our providers may process data outside your country, including outside the EEA/UK. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

Retention

We keep account data and saved architectures while your account is active, and purchase records as long as required by law. Data is then deleted or anonymised.

Your rights

Depending on where you live (including under GDPR and Turkish KVKK), you may have the right to access, correct, delete, restrict or object to processing of your data, to data portability, and to withdraw consent. You may also complain to your data protection authority. We respond to requests within one month. You can contact us through the contact details provided on this website.

Security

We use appropriate technical and organisational measures, including encrypted connections and access controls that limit each user to their own data.