1. Who we are
Tmob AI Studio is operated by Tmob Bilişim Yazılım Teknoloji Sistemleri A.Ş. (“Tmob”, “we”, “us”), the controller of personal data processed through this website. Registered address: Çiftehavuzlar Mah. Eski Londra Asfaltı Cad. No: 151 B1 Blok İç Kapı No: 206 Esenler / İstanbul, Türkiye. For any privacy question or to exercise your rights, contact us at business@thinksmobility.com.
2. Definitions
- Personal data — any information relating to an identified or identifiable person.
- Processing — any operation performed on personal data — collection, storage, use, disclosure or deletion.
- Controller — the party that decides why and how personal data is processed (Tmob, for this site).
- Processor / service provider — a party that processes personal data on the controller’s instructions.
- Data subject — the individual the personal data relates to — you.
3. Scope
This policy covers personal data we process when you browse tmobstudio.ai, when you contact us or book a call, and when you request a proposal — including the documents and conversation you send with that request. It does not cover third-party sites we link to, which have their own policies.
4. What we collect, why, and how long
We collect only what we need for the interactions below. The table summarises each; the notes that follow add detail.
| Context | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Browsing | IP address, browser & device type, access logs | Keep the site secure and available | Legitimate interest — Art. 6(1)(f) | As long as needed for security |
| Contact & Book a Call | Name, work email, company, message | Reply and arrange a call; if you opt in, send communications | Contract steps & legitimate interest — Art. 6(1)(b),(f); consent for marketing — Art. 6(1)(a) | Until we have responded / until you unsubscribe |
| Request a Proposal | Name, work email, company; uploaded document(s); AI PM chat transcript | Scope, prepare and deliver your proposal | Contract steps — Art. 6(1)(b); explicit consent for uploaded content — Art. 6(1)(a) | Six months from the request |
| Analytics cookies | See Cookie Policy | Aggregate usage measurement | Consent — Art. 6(1)(a) | See Cookie Policy |
Marketing communications. If you opt in on the Book a Call form, we may send you occasional communications about Tmob. You can withdraw consent and unsubscribe at any time using the link in any message or by writing to us; withdrawing does not affect processing already carried out.
5. How your proposal documents are handled
Your files are scanned for malware before anything is stored — if the scan cannot run, the file is not stored and you are asked to try again. Stored files live outside the public web root and are never reachable by a public address; our team opens them through links that expire after 24 hours and can be revoked at any time, and every access is logged.
The chat transcript is stored with your request and linked for our proposal team; it is never emailed to you and never included in the generated document. Our internal Microsoft Teams notification carries no personal data — only your company name, a reference number and the expiring links. Your name and email stay behind authentication.
6. Own infrastructure — no third-party AI
Proposal documents and data are processed on our own infrastructure. Your document is not sent to any third-party AI service. We do not sell personal data and we do not use your content to train models.
7. Service providers & sub-processors
We share personal data only with the providers needed to run the site and respond to you, each bound by confidentiality and data-protection terms, and with authorities where the law requires. Current categories:
- Analytics — Google (Google Analytics 4 via Google Tag Manager) — aggregate, consent-based site measurement.
- Advertising measurement — Google Ads via Google Tag Manager — consent-based advertising and conversion measurement.
- Hosting & infrastructure — the provider(s) that host this site and the proposal portal.
- Email delivery — the provider used to send our replies and, where you opt in, communications.
Before or without consent, advertising and analytics storage remain denied, and no advertising or analytics cookies are read or written. Google still receives cookieless consent and measurement pings with ads data redaction. Full measurement and cookies start only after you accept.
8. International transfers
We do not transfer your personal data abroad. Where a service provider processes data outside your region, we put appropriate safeguards in place before any transfer.
9. Security
We protect personal data with technical and organisational measures, including: access controls and authentication; logging of every access to proposal files; malware scanning on upload; storage outside the public web root; time-limited, revocable access links; encrypted transport (TLS); and least-privilege access limited to the team preparing your proposal. No method is perfectly secure, but we review these measures regularly.
10. Automated decision-making
We do not make decisions that produce legal or similarly significant effects about you by solely automated means. AI agents assist in preparing your proposal, but scope, sign-off and delivery are decided by our team.
11. Children
This is a business service not directed to children, and we do not knowingly collect personal data from anyone under 18.
12. Your rights
Under the GDPR and other applicable data protection law you have the right to:
- Access — obtain confirmation of whether we process your data, and a copy of it.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — have your data deleted where there is no overriding reason to keep it.
- Restriction / objection — limit or object to a particular use, including profiling.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent — at any time, which stops any proposal work in progress and future communications.
To exercise any of these, write to business@thinksmobility.com from the address you used and we will respond within the period the law requires. You may also lodge a complaint with your local data protection authority.
13. Engagement data
If we sign a contract, the personal data and content processed within that engagement are governed by that agreement and its data-processing terms, which take precedence over this policy for engagement data. A data processing agreement (DPA) is available on request.
14. Changes
We may update this policy; the effective date above shows the current version, and we will flag material changes where appropriate.