Privacy Policy

Last Updated: March 25, 2026

1. Data Controller

This privacy policy has been prepared by The Big Studio ("we", "our") in accordance with applicable data protection regulations, including the Turkish Personal Data Protection Law No. 6698 (KVKK) and the General Data Protection Regulation (GDPR).

  • Email: thebigstudiotr@gmail.com
  • Website: https://thebigstudio.net

2. Personal Data We Collect

We process the following personal data through our services:

a) Contact Form
  • Full Name
  • Email Address
  • Message Content
b) Voice2Action (Steam Application)
  • Steam ID: For authentication and user account management
  • Voice Data: Only when AI mode is enabled, voice data is sent to OpenAI Whisper API for speech recognition. Voice data is not stored on our servers.
  • Text Data: When AI text correction is used, text is sent to OpenAI GPT API. Text data is not stored on our servers.
  • Credit Balance: For the in-app credit system
  • Payment Information: Processed through the Steam Micro Transaction system. We never see or store credit card or payment details.
c) Eat or DIE! (Steam Game)
  • Steam ID: For in-game progress and achievements
d) ManasPDF

ManasPDF works entirely offline and does not collect any personal data.

3. Purposes and Legal Basis of Data Processing

Purpose Legal Basis
Responding to your contact requests Legitimate interest
User account creation and management Performance of contract
Voice-to-text conversion (AI mode) Consent (user activates AI mode)
Processing payments Performance of contract
Ensuring service security Legitimate interest

4. Data Sharing

Your personal data may be shared with the following third parties:

Recipient Purpose Location
Valve Corporation (Steam) Authentication and payment processing USA
OpenAI Speech recognition and text correction (AI mode only) USA
Microsoft Azure Website and API hosting USA / Europe

5. Data Retention

  • Contact form data: Up to 1 year after your request is resolved
  • Steam user data: As long as the account remains active
  • Voice and text data: Not stored; deleted immediately after processing
  • Payment records: 10 years as required by law

6. Cookies

Our website only uses essential session cookies. These cookies are necessary for secure form functionality (CSRF protection). We do not use advertising or analytics cookies.

7. Data Security

We implement the following technical and organizational measures to protect your personal data:

  • Encrypted data transmission via HTTPS/TLS
  • JWT-based authentication
  • Spam and bot protection (honeypot, CAPTCHA)
  • CSRF protection
  • Payment data processed by Steam infrastructure (never stored by us)

8. Your Rights

Under applicable data protection laws, you have the right to:

  • Learn whether your personal data is being processed
  • Request information about the processing
  • Learn the purpose of processing and whether data is used accordingly
  • Know the third parties to whom your data has been transferred
  • Request correction of incomplete or inaccurate data
  • Request deletion or destruction of your data
  • Request that corrections or deletions be notified to third parties
  • Object to any adverse result arising from automated analysis of your data
  • Claim compensation for damages caused by unlawful processing

To exercise your rights, please contact us at thebigstudiotr@gmail.com with identity verification information. Your request will be responded to within 30 days.

9. Policy Changes

This privacy policy may be updated from time to time. Updates will be published on this page. Users will be notified of significant changes.