Privacy Policy — soruLab

This policy explains how soruLab (the "Service") processes personal data. When you use the Service, you accept this policy.

Data controller

soruLab operates the technical infrastructure for account creation, content delivery and subscription status. We process data in line with the infrastructure providers we use. For all data requests, write to info@sorulab.app.

Data we process

Account data: your email address, your name if you give it, and the technical records that authentication requires.
Usage data: counters and records for PDF downloads and quiz results. We use them to apply plan limits and to keep the Service secure.
Technical data: cookies and similar identifiers that the session and security require when you use the website.
Analytics data: page views, session length and on-site interactions, measured with cookies (PostHog, EU servers). This measurement does not reveal your identity. We do not build a person profile for an anonymous visitor.
Payment data: Paddle is the merchant of record for web purchases. Paddle processes your payment details. soruLab does not store card numbers.

Purposes and legal basis

We process data to create and keep your account, to confirm your subscription status, to give you access to content, to prevent misuse and to meet legal obligations. For users in the European Union, the legal basis is the contract with you (Art. 6(1)(b) GDPR) and our legitimate interest in a secure service (Art. 6(1)(f) GDPR). For users in Türkiye, we meet the information duty under the Personal Data Protection Law No. 6698 (KVKK).

Retention

We keep data while your account is active, or as long as the law requires. When you delete your account or ask us, we delete or anonymise the data within a technically possible period.

Third parties

Infrastructure providers (hosting, authentication, storage, payment) process your data only to deliver the Service. We use contractual and technical measures with these providers. We do not sell personal data.

Your rights

You can ask for information, correction, deletion, restriction, data portability and objection. Write to info@sorulab.app. We answer within the legal time limits. If you are in the EU, you can also complain to your local data protection authority.

Children

The Service is for education. We do not recommend an account for a minor without the consent of a parent or guardian. When a parent opens an account for a child, the parent is responsible for the account.

Changes to this policy

We can update this text. For important changes, we inform you on the website and, where suitable, in the app.