TUMB legal
KVKK Disclosure Text
This disclosure explains TUMB's personal data processing activities under Turkey's Personal Data Protection Law for account, production, payment, and support workflows.
Last updated: May 17, 2026
Data controller
TUMB acts as data controller for personal data processed through creatumb.com in AI thumbnail generation, trend analysis, project management, billing, and support workflows.
Categories of data
Identity and contact data, account and session records, payment and subscription records, usage and transaction logs, generation inputs, source images, support messages, and security logs may be processed.
Processing purposes
Personal data is processed to run membership and session flows, create AI thumbnails, manage credits and subscriptions, provide customer support, maintain system security, and meet legal obligations.
Legal bases
Processing may rely on contract performance, legal obligation, legitimate interest, establishment or protection of rights, and explicit consent under Article 5 of the KVKK and related legislation.
Transfers
Data may be shared with hosting, database, authentication, payment, file storage, analytics, security, and AI generation providers to the extent required by the service. Cross-border transfers are assessed under applicable legal safeguards.
Rights and applications
You may submit information, correction, deletion, objection, and compensation requests under Article 11 of the KVKK. Applications are evaluated after reasonable identity verification.