1. Data controller
Your personal data is processed by Ivy Live ("Ivy") as data controller, in accordance with the KVKK. For any request or question: info@ivy.live
2. At a glance
Before the detail, a summary: Ivy asks you for the least data possible, does not store your identity document, does not sell your data and does not profile you for advertising. In return, transactions written to the blockchain are public and cannot be deleted.
- What we store: basic information from your sign-in method, your wallet address, the content you create and technical logs.
- What we do not store: your identity document itself, your wallet private key, payment card details.
- We do not sell: your personal data is never sold to third parties or marketed for advertising.
3. Personal data we process
- Identity and contact: the email address from your sign-in method or your linked social account (Google / X) identifier; the display name and username you choose.
- Wallet and onchain data: your Kaia network wallet address and the transactions made with it. By its nature this data is public (see Section 8).
- Verification (KYC) data: when you verify your account, a third-party KYC provider processes your identity document. On Ivy's side only a blinded verification key is stored; the contents of your identity document are not kept by Ivy.
- Content data: the posts, images, videos, comments, prompts and profile information you share.
- Interaction data: your follow relationships, likes, message records and notification preferences.
- Usage and technical data: device/browser information, IP, log records and error/diagnostic data.
4. Purposes of processing
- To create your account, verify your identity and provide the service;
- To carry out post, like, tip and payment transactions;
- To calculate your earnings and display the related records;
- To send notifications and apply your preferences;
- To provide security and prevent abuse, spam and fraud;
- To detect errors and improve the Platform;
- To fulfil legal obligations and respond to legal requests.
We do not use your data outside these purposes. We do not display advertising or share data with third parties for marketing.
5. Legal grounds (KVKK art. 5)
Your personal data is processed on the grounds that it is necessary for the establishment or performance of a contract, for the establishment and protection of a right, for Ivy's legitimate interests, for compliance with a legal obligation and, where required, on the basis of your explicit consent. For processing based on explicit consent (for example notification permission) you may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out until that date.
6. Transfers to third parties
To provide the service, your data is shared on a limited basis with suppliers in the following categories. These providers process your data only on our instructions and only to the extent required to deliver the service:
| Provider type | Data shared | Purpose |
|---|---|---|
| Identity and wallet provider | Email / social account identifier, wallet address | Sign-in and embedded wallet management |
| KYC provider | Identity document (not stored by Ivy) | One-time account verification |
| Database and hosting | Account and content data | Running the service |
| Error monitoring | Technical logs, error records | Fault detection and resolution |
| Video streaming provider | Videos you upload | Video processing and delivery |
Where legally required, data may also be shared with authorised public institutions.
7. Transfers abroad
Some of the providers above may be located outside Turkey. In that case the transfer is carried out under KVKK art. 9, with the safeguards required by the applicable legislation (standard contract, undertaking or adequacy decision) or, where necessary, with your explicit consent.
8. The public nature of the blockchain
Important: data written to the Kaia blockchain (your wallet address, your transactions, your ivyId and related onchain records) is public, permanent and cannot be reversed or deleted. Ivy cannot remove this data from the blockchain. You should take this permanence into account before making an onchain transaction.
Your wallet address alone does not contain your name; however, if an address is linked to your real identity anywhere, all past transactions of that address also become linkable to that identity. This is not specific to Ivy; it is true of all blockchains.
9. How is verification data protected?
Two measures protect your privacy during account verification:
- Your ivyId is not sent to the verification provider; the provider does not know which Ivy account it verified.
- The unique identity value returned by the provider is blinded on our server using an irreversible method. Only this blinded value exists in our database and on the chain.
As a result, the chain only sees that "this account is verified"; it does not see who you are.
10. Retention periods
| Data | Retention |
|---|---|
| Account and profile information | While the account is active |
| Content (posts, video, comments) | Until you delete it or close your account |
| Technical logs and error records | Short term, typically a few months |
| Blinded verification key | While the verification remains valid |
| Onchain data | Permanent (cannot be deleted) |
Records subject to a legal retention obligation are kept for the period prescribed by the relevant legislation; once the period expires they are deleted or anonymised.
11. Cookies and local storage
The Platform uses cookies and browser local storage to maintain your session and remember your preferences. See the Cookie Policy for details.
12. Notifications
If you allow browser notifications, a subscription record generated by your browser is stored so that notifications can be delivered. This record is used solely to send you notifications. You can withdraw the permission at any time from your browser settings or the application settings.
13. Children's data
The Platform is not designed for people under 18 and data is not knowingly collected from anyone under that age. If we become aware that such data has been processed, we delete it without delay. If you have a notice to this effect, please write to us.
14. Data security
We apply reasonable technical and administrative measures to protect your data: access controls and privilege limits, encryption in transit, error and access monitoring, and separate management of sensitive keys. However, we remind you that no internet service can provide absolute security.
The security of your wallet keys and of the account you sign in with is your responsibility. The Ivy team will never ask you for a password, private key or recovery phrase.
15. In case of a data breach
If we determine that your personal data has been obtained unlawfully by others, we notify the affected individuals and the Personal Data Protection Board as soon as possible.
16. Automated decision-making and profiling
No fully automated decisions producing legal effects concerning you or significantly affecting you are made. Algorithmic arrangements such as content ranking are based on interaction data rather than personality profiling, and do not affect the status of your account.
17. Your rights (KVKK art. 11)
Under the KVKK you have the right to:
- Learn whether your personal data is processed and request information about it;
- Learn the purpose of processing and the third parties to whom data is transferred;
- Request correction if it has been processed incompletely or inaccurately;
- Request erasure or destruction where the conditions are met; this right is limited to off-chain data, as onchain data cannot technically be deleted;
- Request that correction and erasure be notified to third parties to whom data was transferred;
- Object to processing analysed exclusively by automated means and request compensation for damages.
You can send your request to info@ivy.live. Requests are concluded within 30 days at the latest, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. So that we can verify your identity, please send your request from the email address linked to your account. If your request is rejected, your right to lodge a complaint with the Personal Data Protection Board is reserved.
18. Changes
We may update this policy. We announce significant changes through the Platform and refresh the update date at the top of the page; the current version is always published here.
19. Contact and applications
Data controller: Ivy Live · Applications and questions: info@ivy.live