Privacy Policy
ICERIK OS · icerikos.com · Last updated: October 2, 2026
1. Introduction
ICERIK OS ("we," "our," or "us") is a content creation and publishing platform available at icerikos.com. It helps businesses research, write and publish content for their website and their Instagram account. This Privacy Policy explains what information we collect, how we use it, who we share it with, and how you can have it deleted.
By using ICERIK OS you agree to this policy. If you do not agree, please do not use the service.
2. Information We Collect
- Account information: your email address and a password. Passwords are stored only as a one-way hash; we cannot read them.
- Business information you enter: your sector, products, target market, brand name, logo, and other details you provide so that content can be tailored to you.
- Content you create or upload: articles, post drafts, images, and — for social media automation — source videos, research topics and notes you add. Videos you upload are transcribed to text so they can be analysed.
- Instagram data: when you connect an Instagram Business or Creator account, we receive the data described in Section 4.
- Google Search Console data: when you connect Search Console, we receive the data described in Section 5.
- Website integration details: if you connect a WordPress site or a webhook, we store the site address and the credentials you provide for publishing.
- Billing information: the name and billing address you enter at checkout, and a record of your purchases. Card payments are handled by our payment providers (iyzico and Paddle); we never receive or store your full card number.
- Technical data: server logs containing IP address, browser type, and the time of requests, kept for security and troubleshooting.
3. How We Use Your Information
- To create and maintain your account and keep you signed in.
- To generate content for you: keyword and topic research, articles, social media posts, captions and images.
- To publish content you have approved to the destinations you connected (your website or your Instagram account), at the time you chose.
- To show you how your content performs, using data from the accounts you connected.
- To process payments and manage your plan.
- To send service messages such as receipts, security notices, and notifications you asked for.
- To keep the service secure, fix problems, and comply with the law.
4. Instagram (Meta Platform Data)
ICERIK OS uses the Instagram API to publish content to your Instagram Business or Creator account on your behalf. When you connect your account, we request only these permissions:
instagram_business_basic– read your account ID, username, account type and profile picture, and the list of media on your account, so we can show which account is connected and confirm what was published.instagram_business_content_publish– publish the photos, carousels and videos you have approved to your account.
We store your Instagram user ID, username, and an access token. The access token is stored encrypted and is used only to carry out the actions above. We do not read your direct messages, and we do not publish anything you have not approved or scheduled.
If we add features that need further permissions (for example replying to comments or showing post insights), we will update this policy and ask for your consent before requesting them.
You can disconnect at any time from Instagram under Settings → Apps and websites. After you disconnect, we can no longer access your account. To also delete data we already hold, see Section 8. Our use of Meta data complies with the Meta Platform Terms and Developer Policies.
5. Google Search Console (Google User Data)
If you connect Google Search Console, we request read-only access to the search performance of the sites you select: search queries, pages, clicks, impressions and average position. We use it only to show you performance reports and content suggestions inside ICERIK OS. We do not modify anything in your Google account.
ICERIK OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time from your Google Account permissions page.
6. Service Providers and Data Sharing
We share data only with the providers needed to run the service, and only to the extent each one needs:
- Hosting and storage: Hetzner (application servers and database) and Cloudflare (domain services and media storage). Images and videos prepared for Instagram are stored at a web address Instagram can fetch them from.
- AI processing: Anthropic (text generation and analysis) and NVIDIA (image generation). The business details, topics, and content needed for a task are sent to these providers to produce the result.
- Video processing: Modal (transcription and video editing of the source files you upload).
- Payments: iyzico and Paddle.
- Platforms you connect: Meta (Instagram), Google (Search Console), your own WordPress site or webhook address. Content is sent to them only when you publish.
- Notifications: Telegram, only if you choose to receive notifications there.
Some of these providers process data outside your country. We may also disclose information if the law requires it, or as part of a merger or sale of the business, in which case we will tell you beforehand.
7. Data Retention
- We keep your account and content for as long as your account is open.
- Source videos you upload for analysis are deleted after they have been processed; the transcript and resulting drafts are kept with your account.
- When you remove an integration inside ICERIK OS, its stored credentials are deleted. If you revoke access from Instagram or Google instead, the stored token stops working immediately and is deleted on request or together with your account.
- When you ask us to delete your account, we delete your data within 30 days. Invoices and payment records are kept for the period required by tax and accounting law.
- Server logs are kept for a limited period for security purposes.
8. Your Rights and Data Deletion
You can ask us to give you a copy of your data, correct it, restrict its use, or delete it. Depending on where you live, these rights are protected by laws such as the KVKK in Türkiye and the GDPR in the European Union, and you also have the right to complain to your data protection authority.
To make a request, email info@peratrade.com.tr from the address registered to your account. We reply within 30 days. Step-by-step deletion instructions are on our Data Deletion page.
9. Security
All connections to ICERIK OS are encrypted in transit (TLS). Passwords are hashed, and access tokens and integration credentials are encrypted at rest. Access to production systems is limited to the people who operate the service. No system is completely secure, so we cannot guarantee absolute security; if a breach affects your data we will notify you as the law requires.
10. Cookies and Local Storage
ICERIK OS does not use advertising or third-party tracking cookies. We use your browser's local storage to keep you signed in and to remember your language preference. Our payment providers may set their own cookies on their checkout pages.
11. Children's Privacy
ICERIK OS is a business tool and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
12. Changes to This Policy
We may update this policy as the service changes. The date at the top shows the latest version. If a change is significant — for example a new kind of data or a new permission — we will notify you by email or inside the service before it takes effect.
13. Contact Us
- Email: info@peratrade.com.tr
- Website: icerikos.com