Legal documents
KVKK Clarification Text
Version 1.0 · Effective: 14 November 2026
This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles of the Obligation to Inform.
1. Who processes data, and in which role?
YaziliOku (yazilioku.com.tr) acts in two different roles:
- Data controller for teacher account data: for the information you give when creating your account and the records of your use of the platform. Contact: info@sysarticles.com
- Data processor for student data: for uploaded exam papers, class lists and the student information in them, the teacher and/or school that uploads them is the data controller. YaziliOku processes this data only on the teacher's instructions and only to grade exams (KVKK Art. 3 and Art. 12/2).
2. Data we process
| Category | Examples | Whose data |
|---|
| Identity and contact | Full name, email address | Teacher |
| Account and transaction security | Password hash (plain passwords are never stored), session records, IP address, browser details, security event logs | Teacher |
| Legal transactions | Consent records (date, IP, document hash) | Teacher |
| Customer transactions | Upgrade requests, payment records, support tickets and screenshots | Teacher |
| Exam data | Exam paper images, student names, school numbers, answers, scores | Student (controller: teacher/school) |
| Parent contact (optional) | Parent email/phone if the teacher adds them to the class list | Parent |
We do not intend to process special categories of personal data (health, religion, biometrics, etc.). Please do not include such data in exam papers or support tickets.
3. Purposes and legal bases
| Purpose | Legal basis (KVKK Art. 5/2) |
|---|
| Creating the account, authentication, providing the service | (c) establishment and performance of a contract |
| Grading and reporting (student data) | Instructions of the controlling teacher/school; (c) for the teacher |
| Information security, attack detection, abuse prevention | (f) legitimate interest, (ç) legal obligation |
| Proof of consents, dispute resolution | (e) establishment, exercise or protection of a right |
| Subscription, billing and support | (c) performance of a contract, (ç) legal obligation |
| Analytics cookies | Explicit consent (KVKK Art. 5/1), only if you opt in |
4. Domestic processing and transfers abroad
- Student data, exam paper images and class lists are processed only on our servers in Turkey with local AI models and are never transferred abroad.
- Operations that contain no personal data, such as drafting an answer key from question texts, may be sent to an AI provider abroad (NVIDIA) for higher accuracy, after an automatic scrubber removes names, numbers, emails and phone numbers.
- Questions typed into the support assistant may also reach that provider after the same scrubbing. Do not write personal data into the support assistant.
- If you accept analytics cookies, visit statistics are transferred to Google LLC (USA) through Google Tag Manager / Google Analytics, based on your explicit consent under KVKK Art. 9; you can withdraw it at any time. No analytics run on the teacher portal, admin panel, parent report or phone camera pages.
5. Retention and automatic destruction
- Exam projects: at the end of the period the teacher selects per project (minimum 1, maximum 20 days; 7 by default), all paper images, PDF/TIFF files, crops and student answer texts are permanently deleted. Student names are masked so only the first two letters of each word remain (e.g. "Ahmet Yılmaz" → "Ah* Yı**") and school numbers are fully hidden. Only the school name, class, subject and the masked score table are kept. The teacher is reminded by email 24 hours before deletion and can delete a project completely at any time.
- Files sent via Telegram but never added to a project: at most 24 hours.
- Support screenshots: 20 days after the ticket is resolved.
- Account data: while the account is open; deleted or anonymized after the statutory periods once it is closed.
- Consent and security records: for the applicable limitation periods, as evidence in possible disputes.
6. Recipients
Our domestic email infrastructure (codes and notifications); a payment institution once card payments are enabled (only what the payment needs; card data is never stored by us); competent public authorities where the law requires; and the AI and analytics providers described in section 4, within those limits.
7. Collection method
Electronically, by automatic or partly automatic means: registration and login forms, Google sign-in, uploads, the Telegram bot, the phone camera page, support forms and cookies.
8. Your rights (KVKK Art. 11)
You may learn whether your data is processed, request information, learn the purpose and whether it is used accordingly, know the recipients, request correction, deletion or destruction and notification of these to recipients, object to a result against you arising exclusively from automated analysis, and claim compensation for damages.
Send requests from your registered email address to info@sysarticles.com. Requests are answered free of charge within 30 days.
Students and parents: the teacher or school is the data controller for exam data, so please contact the school first; YaziliOku helps the school fulfil such requests.
9. About automated assessment
The AI only suggests scores. The teacher reviews and approves every grade, and no grade reaches an official system without the teacher's approval, so assessment is never made exclusively by automated systems.
v1.0-2026 · SHA-256 85c108366b445d5a…
Privacy and Cookie Policy
Version 1.0 · Effective: 14 November 2026
1. Our core rule: student data never leaves Turkey
Exam paper images, student names, school numbers and class lists are stored only on our servers in Turkey and processed with local AI models. They are never sent to a cloud service abroad. See the KVKK Clarification Text for details.
2. How we protect your data
- All connections are encrypted (HTTPS); passwords are stored irreversibly (Argon2id).
- Every uploaded file is re-encoded in an isolated process that strips hidden code and metadata; malicious files are rejected.
- Bot tokens and payment keys are encrypted in the database with AES-256-GCM.
- Attack attempts are scored automatically; repeated attacks block the account and IP address.
- Exam projects are deleted automatically after the 1–20 days you choose, and student names are masked.
- Parent report links are unguessable and protected by the last 3 digits of the school number; parents only see their own child's results.
3. Use of AI
- Everything involving student data (handwriting reading, name matching, student reports) runs only on local models.
- Operations without personal data (e.g. an answer-key draft from question texts) and support assistant questions may go to a model provider abroad after automatic personal-data scrubbing.
- Your data is not used to train AI models. A teacher's score corrections are kept only as student-free rules that improve that teacher's own later grading.
- AI can make mistakes; every score is subject to the teacher's approval.
4. Cookies
| Cookie | Type | Purpose | Duration |
|---|
| yo_access, yo_refresh | Strictly necessary | Keep your session securely signed in | 15 minutes / 14 days |
| yo_csrf | Strictly necessary | Block forged requests | 14 days |
| yo_oauth | Strictly necessary | Secure the Google sign-in flow | 10 minutes |
| yo_lang, yo_theme | Functional | Remember your language and theme | 1 year |
| yo_consent | Strictly necessary | Remember your cookie choice | 6 months |
| _ga, _ga_* and Google Tag Manager cookies | Analytics (optional) | Visit statistics | As set by Google |
- Necessary and functional cookies are required for the service and need no consent.
- Analytics cookies are loaded only with your explicit consent and only on public marketing pages. No analytics tool runs on the teacher portal, admin panel, parent report or phone camera pages.
- Refusing changes nothing about the service. You can change your choice at any time via "Cookie preferences" at the bottom of the page.
5. Email
We only send service emails (verification codes, password resets, deletion reminders, subscription and security notices). No commercial electronic messages are sent without your consent.
6. Changes and contact
When this policy changes materially you will be asked to accept it again. Questions: info@sysarticles.com
v1.0-2026 · SHA-256 8367daed0bdead9d…
Teacher Data Controller Undertaking and Processing Instructions
Version 1.0 · Effective: 14 November 2026
This undertaking governs, under KVKK Art. 12/2, the relationship between me (data controller) and YaziliOku (data processor) for the student data in the exam papers and class lists I upload. By using the platform I accept and undertake that:
- Authority: I am authorized to grade and process the exam papers and student lists I upload. I and/or my school are the data controller, and informing students and parents and ensuring a lawful basis are our responsibility.
- Instructions: I instruct YaziliOku, through the platform's functions, only to grade, report and share results with the student/parent. YaziliOku may not use student data for any other purpose, may not use it to train AI models and may not transfer it abroad.
- Data minimization: I upload only the data needed for grading and avoid documents with special categories of personal data (health, religion, biometrics, etc.).
- Children's data: I know most students are children and share parent report links only with the relevant parent.
- Final decision: Reviewing every AI-suggested score, checking answer-key drafts before approving them and approving grades is my responsibility.
- Retention: I know files are permanently deleted at the end of the period I choose per project (maximum 20 days) and student names are masked.
- Security and breaches: YaziliOku takes technical and organizational security measures and informs me without delay if it learns of a breach affecting student data. I report any unauthorized use of my account immediately.
- Data subject requests: When answering KVKK requests from students or parents, I may ask YaziliOku for the necessary technical support.
v1.0-2026 · SHA-256 d3a00f80a61ee8fd…
Terms of Conditions
Version 1.0 · Effective: 14 November 2026
1. Parties and scope
These terms govern the YaziliOku service ("Service") offered at yazilioku.com.tr and its connected applications (including the Telegram bot and the phone camera page). Creating an account means you accept them. Contact: info@sysarticles.com
2. Nature of the Service: decision support
YaziliOku is a decision-support tool that helps teachers grade exam papers. AI-generated scores, answer-key drafts, feedback and analyses are suggestions only and may be wrong.
3. The teacher holds final responsibility
- Reviewing, approving and communicating every grade, and entering it into official systems (e.g. e-Okul), is solely the teacher's responsibility.
- AI-drafted answer keys are never used for grading before the teacher approves them, and the teacher must review a draft before approving it.
- YaziliOku is not liable for consequences of grades the teacher approves without review.
4. Accounts and acceptable use
- You keep your credentials confidential and may not share your account.
- You may upload only exam papers you are authorized to grade (Teacher Data Controller Undertaking).
- Attacks, malicious uploads, attempts to bypass security, AI abuse or abusive language may lead to automatic temporary or permanent blocking. If you believe a block is wrong, write to info@sysarticles.com.
- Reverse engineering, automated bulk querying and reselling the Service are prohibited.
5. Trial, subscription and payment
- New accounts get a 10-day free trial. When it ends, creating exams and uploading papers is locked; reports of exams graded during the trial stay viewable and downloadable for their retention period.
- Upgrade requests are sent by email or the in-app form; once approved, time and paper credits are added to your account. When card payments are enabled, prices and conditions are shown at checkout.
- Your statutory consumer rights (including withdrawal) are reserved; exceptions for services performed instantly in electronic form apply only as provided by law.
6. Data retention
Exam files are permanently deleted after the 1–20 day period you choose for each project and cannot be recovered; downloading the reports you need before then is your responsibility.
7. Availability
The Service is not guaranteed to be uninterrupted or error-free; maintenance, updates and security work may cause temporary outages. Except where liability cannot be limited by law, YaziliOku's liability is limited to the subscription fee you paid for the relevant period.
8. Intellectual property
The software, design and brand belong to YaziliOku. Rights in the content you upload and in exam results remain with you and your school.
9. Changes and governing law
These terms may change; you will be asked to accept material changes again. Turkish law applies. For users acting as consumers, Consumer Arbitration Committees and Consumer Courts have jurisdiction.
v1.0-2026 · SHA-256 3b716432429189e7…