Privacy Policy

Last updated: July 15, 2026

This Privacy Policy explains how Infumia LTD processes your personal data across infumia.com, qr.infumia.com, ikpaneli.com and our mobile apps (Cartoonizer, Vena, Kazanço). We comply with UK GDPR and applicable data protection laws.

1. Data We Collect

• Identity: Name, email, phone, company info
• Account: Username, bcrypt-hashed password, profile photo
• Technical: IP, browser, device, usage statistics
• Payment: Invoice details (card data handled by PCI-DSS providers, not stored by us)
• Mobile: Device ID, camera/gallery access (Cartoonizer only, on-device processing)

2. How We Use Data

• Provide, maintain and improve services
• Account management and authentication
• Process quote requests and respond
• Fulfil contractual and legal obligations
• Prevent fraud and ensure security
• (With consent) Marketing

3. Mobile Apps & Sensitive Data

• Cartoonizer: All AI processing on-device. Photos never sent to servers.
• Vena: All analysis on-device. Nothing sent to cloud.
• Kazanço: Payment info masked after transaction.
• QR Menu: Customer data deleted after 90 days.
• Children: Not for under 16s. Data deleted if detected.

4. Data Sharing

Only with: service providers (hosting, payment, email) with DPAs, legal requirements, company transfers.

5. Security

SSL/TLS, RBAC, 2FA, DDoS protection, ISO 27001 standards, regular audits.

6. Retention

Data	Retention	Reason
Account	30 days post-closure	Recovery window
Communication	24 months	Customer service
Quote request	12 months	Project tracking
Invoices	10 years	UK tax law

7. Your Rights (UK GDPR)

• Access, correction, deletion, restriction, portability, objection, withdraw consent

Email info@infumia.com to exercise rights. Response within 30 days.

8. International Transfers

Data may be processed in UK, Turkey and Germany. Standard Contractual Clauses apply.

9. Contact