OLAB AssistOLAB Assist is a service by Olasi Works - Serkan Odemis that checks how search engines and AI assistants read a website, monitors those signals every week and tracks how AI assistants answer questions about a brand. This policy explains which personal data we process, why, who receives it and what you can do about it.
1. Data controller
Olasi Works - Serkan Odemis
Meydankavagi Mah. İsmail Cem Caddesi 27 Muratpasa/Antalya/Türkiye
olasiworks.com · support@olabassist.com
2. Data we process
- Account: name, email address, the sign-in method you use (Google, Apple, or email and password or email link) and the user ID that method provides. If you sign in with email and password, the password is handled by our authentication provider; we never see or store it.
- Sites and audits: the domains you check or monitor, audit results, scores, findings, score history and recorded changes.
- AI answer tracking: the questions (prompts) you add, the brand name you confirm, the competitors you track, and the answers, sources and model names returned by AI assistants.
- Settings: language, theme and email notification preferences.
- Plan and billing: your plan, trial dates, invoices and payment status. Card details are entered with our payment provider; we never see full card numbers.
- Support: messages you send us, the email address you use and any screenshots you attach.
- Technical data: IP address, browser and device information and server logs. For the free audit we keep only a salted hash of the IP address to limit abuse, not the address itself.
Please do not send special categories of personal data (for example health data) in prompts, messages or attachments.
3. Free audits and share links
You can run an audit without an account. An audit reads only public pages of the domain: the homepage, robots.txt, llms.txt and the sitemap. Each report has a hard-to-guess link; anyone who has the link can open it, so share it only with people you choose.
4. Why we use data
- To create your account and keep you signed in.
- To run audits, weekly scans and AI answer tracking, and to show results, history and changes.
- To send emails you asked for or that the service needs: sign-in and verification emails, weekly summaries and change alerts (you can turn the last two off in Settings).
- To manage plans, trials, payments and invoices.
- To answer support requests.
- To keep the service secure, prevent abuse and fix errors.
- To meet legal obligations.
5. Legal bases
We process data to perform our contract with you, on the basis of our legitimate interest in running and securing the service, to comply with legal obligations and, where the law requires it, with your consent. These bases follow the Turkish Personal Data Protection Law (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).
6. Who receives data
We use the following providers to run the service. Each receives only what it needs:
- Google Firebase: sign-in, account security and sign-in emails.
- Apple: Sign in with Apple, if you choose it.
- Cloudflare: hosting, database, security, human verification on the contact form and email delivery.
- OpenAI (ChatGPT), Google (Gemini), Anthropic (Claude), Perplexity and DataForSEO (for Google AI Overviews and AI Mode results): receive the text of the prompts you track so they can answer them. We do not send your name, email address or account details with the prompt.
- Paddle: processes payments as merchant of record and handles invoices, taxes and refunds.
- Google Analytics: measures visits to our public pages, only if you accept analytics cookies.
- Google Workspace: hosts our support mailbox.
We may also disclose data to authorities when the law requires it. We do not sell or rent personal data and we do not use it for advertising.
7. International transfers
Our providers may process data outside Türkiye and the European Economic Area, including in the United States. We use providers that offer transfer safeguards recognised under KVKK and GDPR, such as standard contractual clauses.
8. How long we keep data
- Account, site, audit and tracking data are kept while your account exists.
- When you delete your account in Settings, we delete your account, monitored sites, prompts, competitors, AI answers and history immediately. Audit reports created earlier stay reachable through their share links but are no longer linked to you.
- If a payment cannot be collected the service is paused, and account data (sites, reports, AI answers, integrations) is deleted 7 days after the pause for the first payment after the trial, or 30 days after it for later payments (see the Terms of Use, section 5). Your email address and whether you used the free trial are kept while the account exists.
- Billing records are kept for as long as tax and accounting law requires.
- Support messages are kept for up to three years after the request is closed.
- Security logs and hashed IP addresses are kept only as long as needed for security and abuse prevention.
9. Your rights
Depending on the law that applies to you, you can ask to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent. You can delete your account yourself in Settings. For anything else, write to support@olabassist.com. You can also complain to your data protection authority; in Türkiye this is the Personal Data Protection Authority (KVKK).
10. Cookies and local storage
We use two kinds of cookies and similar browser storage:
- Necessary: your theme and language choice, the sign-in session created by our authentication provider, the payment window run by Paddle and the human check on the contact form (Cloudflare Turnstile). These are needed for the site to work and are always on.
- Analytics (optional): Google Analytics 4 counts visits and shows how pages are used, so we can improve the site. It runs only if you accept analytics in the cookie banner. Advertising features are off and Google Analytics 4 does not store IP addresses. Cookies used:
_gaand_ga_*.
We do not use advertising cookies. You can change or withdraw your choice at any time with “Cookie preferences” at the bottom of every page; withdrawing removes the analytics cookies.
11. Security
We use HTTPS, verified sign-in tokens, access controls, rate limits and other technical measures. No online service is completely free of risk, so we cannot guarantee absolute security.
12. Children
OLAB Assist is meant for businesses and professionals and is not directed at children. We do not knowingly collect data from children.
13. Changes
We may update this policy. We show the date of the latest version at the top and tell account holders by email about material changes.