CadXiaPrivacy Policy
1. Who we are
CadXia and cadxia.muhzekai.com are provided by MEHMET UYANIK, operating under the MuhzekAI brand, who is the data controller under Turkish Personal Data Protection Law No. 6698 (KVKK). MuhzekAI is a brand name. Contact: bildirim@muhzekai.com
2. What we process and how
| Data | When and where | Retention |
|---|---|---|
| DWG, DXF, SHP, KML/KMZ, GeoJSON files and your drawings | Processed only on your device, in app memory. Never sent to us. | Cleared from memory when the app or tab closes. You export files yourself to keep them. |
| NCZ files | NCZ cannot be read on the device, so the file is uploaded over an encrypted (HTTPS) connection to private, non-public temporary storage that only we can access. The conversion service reads it from there, and the result returns to you the same way. | The file and the result are deleted as soon as conversion finishes, usually within seconds. If the connection drops, they are deleted automatically within 24 hours. Contents are never logged or used for any other purpose. |
| Parcel lookups (province/district/neighbourhood, block/parcel or a map position) | Forwarded through the CadXia service to the public parcel service of the Turkish General Directorate of Land Registry and Cadastre (TKGM). TKGM sees our server's IP address, not yours. | Query parameters are not logged. |
| Location | Only when you tap My location, with operating-system permission, to show your position on the map. Not sent to our server. No background tracking. | Not stored. |
| Language and text-encoding preferences | Stored in your device's local storage. | Until you uninstall the app or clear browser data. |
| Technical connection data (IP address, device/browser type, request time) | Created in the standard access logs of our hosting infrastructure when you connect. | Briefly, for security and error diagnosis, per the hosting provider's retention. |
| Purchase information (Pro) | Payments are handled by the Apple App Store or Google Play; we never see your card details. We process the store-provided transaction/subscription ID and status to verify Pro access. | For the subscription term and legally required periods. |
| Support correspondence | Your email address and message if you contact us. | Up to 2 years after the request is resolved. |
3. Third-party map and content providers
Basemaps and some content load directly from providers' servers. To deliver the service, these providers receive your IP address and the map area being viewed, and process them under their own privacy policies:
- OpenStreetMap: basemaps
- Google Maps (Android and web): when the Google basemap is selected. Google Privacy Policy
- Apple Maps / MapKit (iPhone/iPad): when the Apple map is used. Apple Privacy Policy
- Icons linked inside your KMZ/KML files load from the addresses written in those files
- Vercel: website and service hosting
- RevenueCat (iPhone/iPad and Android): checks with the store whether the Pro subscription is active. It never receives card details; only the store's subscription identifier and status are processed. RevenueCat Privacy Policy
Directions links open the Apple Maps or Google Maps app, whose own policy applies from there.
4. Purposes and legal bases
We process data to provide the features you request (file conversion, parcel lookup, maps, location), verify Pro subscriptions, keep the service secure and prevent abuse, answer support requests and meet legal obligations. Legal bases: performance of a contract (KVKK Art. 5/2-c), legal obligation (Art. 5/2-ç) and legitimate interests that do not override your rights (Art. 5/2-f). Location is used only for the action you start, with your operating-system permission.
5. Sharing and international transfers
We do not sell, rent or share personal data for advertising. Data is shared only with the providers in section 3, to the extent technically required to run the service. Some of them operate servers outside Türkiye, including in the US and EU. These transfers are limited to what is necessary to provide the service, in line with KVKK Art. 9. We may disclose information to authorities where legally required.
6. Security
All connections use HTTPS. NCZ files are kept in private storage that can only be opened through short-lived access links, and conversion runs under size and time limits. File contents, parcel parameters and credentials are not written to access logs.
7. Children
CadXia is a tool for engineering and mapping professionals. We do not knowingly collect data from children under 13.
8. Your rights
Under KVKK Art. 11 you may ask whether your data is processed, request information about it and its purpose, learn which third parties receive it, request correction, deletion or destruction and notification of these to recipients, object to adverse outcomes of solely automated analysis, and claim compensation for unlawful processing. Residents of the EU/EEA and the UK have equivalent rights under the GDPR, including the right to lodge a complaint with a supervisory authority.
Send requests to bildirim@muhzekai.com. We respond free of charge within 30 days.
9. Data deletion
CadXia has no user accounts and does not store your files on our servers. To delete on-device preferences, uninstall the app or clear the site data in your browser. Manage your subscription in your Apple or Google account settings. You can ask us by email to delete your support correspondence.
10. Changes
We update this policy when the way the app works changes. The current version is always published at this address, with its effective date at the top. Significant changes are also announced in the app.