Privacy Policy

1. Introduction

Leonith Mechanics & Consulting ("Leonith," "we," "us," or "our") operates the website leonithmechanics.com (the "Website"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our Website or use our services, including our AI-powered project intake chatbot.

By accessing or using our Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Website.

2. Data Controller

3. Information We Collect

3.1 Information You Provide Directly

We collect the following information when you interact with our Website:

Contact Form: When you submit a contact inquiry, we collect:

• Full name
• Email address
• Company name (optional)
• Service interest (selected from predefined options)
• Message content

AI Project Intake Chatbot: When you use our AI-powered project intake chatbot on the /start page, we process:

• Conversation messages you submit during the intake session
• Project details, specifications, and requirements you describe
• Your email address (when provided during the conversation for brief delivery)

Chatbot conversations are processed in real-time and are not stored on our servers after the session ends. The conversation is used solely to generate a structured project brief during your active session.

3.2 Information Collected Automatically

IP Address: We collect your IP address for rate-limiting purposes to prevent abuse of our chatbot service. IP-based rate-limiting data is stored temporarily (up to 24 hours) and then automatically deleted.

We do not currently use cookies, analytics tools, or third-party tracking technologies on our Website.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your contact inquiries
• To process your project intake through our AI chatbot and generate a preliminary engineering brief
• To classify your project and determine the appropriate service option
• To send you the generated project brief via email (when you provide your email address)
• To deliver internal notifications to our team regarding new project inquiries
• To prevent abuse and maintain the security of our services (rate limiting)
• To comply with applicable legal obligations

5. Third-Party Service Providers

We use the following third-party services to operate our Website. Each service processes data as described below:

Anthropic (Claude AI): Our chatbot is powered by Anthropic's Claude AI. When you use the chatbot, your conversation messages are transmitted to Anthropic's servers for processing. Anthropic processes this data in accordance with their privacy policy and data processing terms. Anthropic's servers are located in the United States.

Resend (Email Delivery): We use Resend to deliver email notifications, including project briefs. When a brief is generated, the brief content and your email address (if provided) are transmitted to Resend for email delivery. Resend's servers are located in the United States.

Upstash (Rate Limiting): We use Upstash Redis to manage rate limiting. Your IP address is temporarily stored (up to 24 hours) to enforce usage limits. Upstash's servers may be located outside of Turkey.

Vercel (Hosting): Our Website is hosted on Vercel. Vercel may process server logs containing IP addresses and request metadata in accordance with their privacy policy. Vercel's servers are located in the United States and other regions.

6. Data Retention

• Chatbot conversation data: Not stored beyond the active session. Processed in real-time only.
• Rate-limiting data (IP addresses): Automatically deleted within 24 hours.
• Project briefs delivered via email: Retained in our email systems for the purpose of responding to your inquiry and managing the client relationship.
• Contact form submissions: Retained for as long as necessary to respond to your inquiry and for a reasonable period thereafter for record-keeping.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission (HTTPS/TLS) for all Website communications
• API key authentication for third-party service integrations
• Rate limiting to prevent abuse and unauthorized access
• Access controls limiting data access to authorized personnel only

While we take reasonable steps to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your information.

8. Your Rights

Under Turkish data protection law (KVKK, Law No. 6698), you have the following rights regarding your personal data:

• Right to know whether your personal data is being processed
• Right to request information about the processing of your data
• Right to know the purpose of data processing and whether it is used in accordance with its purpose
• Right to know the third parties to whom your data is transferred
• Right to request correction of incomplete or inaccurate data
• Right to request deletion or destruction of your personal data under conditions set by law
• Right to object to processing of your data exclusively through automated systems
• Right to claim compensation for damages arising from unlawful processing

To exercise any of these rights, please contact us at aslantas@leonithmechanics.com. We will respond to your request within 30 days.

9. International Data Transfers

As described in Section 5, some of our third-party service providers are located outside of Turkey, primarily in the United States. When your data is transferred internationally, we ensure appropriate safeguards are in place in accordance with KVKK Article 9.

10. Children's Privacy

Our Website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a minor, we will take immediate steps to delete such data.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where required by law, provide additional notice.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us: