KVKK & GDPR Notice
Last updated: 17 June 2026
This notice describes how Blab processes personal data under Türkiye's Personal Data Protection Law (KVKK, Law No. 6698) and, where applicable, the EU GDPR. It complements the Privacy Policy.
1. Data controller
The operator of Blab acts as the data controller for account and usage data. Contact the controller at support@blab.work. (Operator legal entity and registered address to be completed by the operator.)
2. Categories & purposes
Identity & contact (name, email) and audio/voice data are processed to deliver the service, secure accounts, meter usage and bill, and to comply with legal obligations.
Voice recordings may constitute special-category/biometric data; we process them only on your explicit consent and instruction, and only to provide the features you use.
3. Legal bases
Performance of our contract with you; your explicit consent (for voice cloning and clips); our legitimate interests in securing and improving the service; and compliance with legal obligations.
4. Transfers
Processing may involve providers acting as processors (our AI gateway, storage and payment providers). Where data is transferred abroad, we rely on appropriate safeguards and your consent as required by KVKK Art. 9 / GDPR Chapter V.
5. Your rights (KVKK Art. 11 / GDPR)
You may learn whether your data is processed, request information and access, ask for correction or erasure, object to processing, request export (portability), and withdraw consent. Use Settings to export or delete your data, or contact us.
6. How to apply
Send requests to support@blab.work. We respond within the periods required by law (KVKK: typically 30 days). You also have the right to complain to the Turkish Data Protection Authority (KVKK Kurumu) or your local supervisory authority.
This document is provided for transparency and may be updated. For specific questions, contact us.