Politikalar ve Yasal Standartlar
Security & Trust Center
Last Updated: August 27, 2026
At Praffer (Turca LLC), the security of your business, audience data, and social media channels is our highest priority. We engineer our platform with defense-in-depth principles, enterprise-grade encryption, and strict multi-tenant isolation.
1. Authentication & Social Media Authorization
- Zero Social Media Password Storage: Praffer NEVER sees, requests, or stores your social media account passwords. All integrations (Instagram, Facebook, LinkedIn, YouTube, TikTok, Canva, Google Drive, Dropbox) are established using official OAuth 2.0 authorization workflows directly on the respective platforms.
- AES-256-GCM Encryption at Rest: All OAuth access and refresh tokens are encrypted using military-grade AES-256-GCM before being committed to our database.
- Two-Factor Authentication (2FA): Time-based One-Time Password (TOTP) 2FA support to protect team accounts against unauthorized access.
- Session Security: Authentication tokens utilize hardened
HttpOnly,Secure, andSameSite=Laxcookie flags, fully mitigating client-side script theft (XSS session hijacking).
2. Data Isolation & Multi-Tenancy
- Tenant Boundary Enforcement: Every workspace operates in strict logical isolation. All database queries, server actions, and background publishing tasks enforce workspace ID tenancy constraints, preventing Insecure Direct Object References (IDOR).
- Role-Based Access Control (RBAC): Granular permissions (Owner, Admin, Editor, Contributor, Viewer) ensure team members only access what they are explicitly authorized to manage.
3. Payment & Financial Security
- Zero Card Data Handling: Praffer does NOT collect, store, or process payment card numbers or CVVs on our infrastructure.
- PCI-DSS Level 1 Infrastructure: All billing, recurring subscriptions, and payment methods are securely handled via Stripe, certified to PCI-DSS Level 1 (the highest standard in global payment security).
4. Infrastructure & Network Defense
- Cloudflare Web Application Firewall (WAF) & DDoS Shield: All inbound HTTP traffic is routed through Cloudflare's global edge network, providing automatic DDoS mitigation, suspicious IP blacklisting, and rate limiting.
- End-to-End TLS 1.3 & HSTS: Forced HTTPS encryption with strict HTTP Strict Transport Security (
HSTS preload, 2-year max-age) and hardened security headers (X-Frame-Options,X-Content-Type-Options: nosniff,Content-Security-Policy). - Isolated Asynchronous Processing: Scheduled posts and background jobs run on dedicated worker queues (BullMQ/Redis) isolated from the primary web application.
5. Compliance, Privacy & Vulnerability Disclosure
- GDPR & KVKK Compliant: We strictly adhere to the EU General Data Protection Regulation (GDPR) and Turkish KVKK standards. Data deletion requests are processed in full compliance via our Data Deletion page.
- RFC 9116 Security Policy: We maintain a machine-readable security policy at
/.well-known/security.txt. - Responsible Disclosure: If you discover a vulnerability or security issue, please contact us immediately at [email protected]. We respond to verified vulnerability submissions promptly.
Privacy Policy
Last Updated: August 21, 2026
This Privacy Policy explains how Turca LLC ("we", "Praffer", or the "Service") collects, uses, stores, shares, and protects your personal information, social media account data, and third-party cloud integration data (Canva, Google Drive, Dropbox, Unsplash, etc.) when you access praffer.com and related software applications. By using Praffer, you acknowledge and agree to the practices described in this policy.
1. Data Controller Identity
Company Name: Turca LLC
Registered Address: 30 N Gould St, Ste N, Sheridan, Wyoming 82801, United States
Privacy & Data Protection Inquiries: [email protected]
2. Information We Collect
In order to provide our social media management and scheduling features, we collect and process the following categories of data:
- Account and Identity Information: Your full name, email address, profile picture (avatar), and a securely hashed password.
- Social Media OAuth Tokens & Account Identifiers: Encrypted OAuth 2.0 access and refresh tokens, account/channel IDs, profile names, handles, and avatar URLs for connected networks (Instagram, Facebook Pages, YouTube, TikTok, LinkedIn, etc.). All access and refresh tokens are stored using industry-grade AES-256 encryption at rest.
- Cloud Storage & Media Tool Integration Data (Canva, Google Drive, Dropbox, Unsplash):
- Canva (Canva Connect API): User ID, design IDs, and encrypted OAuth tokens necessary to initiate design sessions and import finished PNG/JPG graphics into Praffer.
- Google Drive (Google Picker API): Download metadata, file URLs, and temporary access tokens for media files specifically and explicitly chosen by the user via the Google file picker. Praffer does NOT scan, index, read, or retain any unselected Google Drive content.
- Dropbox (Dropbox Chooser): Direct download links and basic file metadata (name, file size, MIME type) for files chosen by the user via the Dropbox Chooser.
- Unsplash (Unsplash API): Search queries and image download attribution records for selected royalty-free stock photos in compliance with the Unsplash License.
- Inbox & Direct Message Data: Comments and direct messages (DMs) retrieved via official social network APIs solely to enable in-app viewing, moderation, and team replies within the Praffer unified inbox.
- User-Generated Content: Post captions, media files (images, videos, graphics), hashtags, scheduling timestamps, and workspace configurations that you upload or create within Praffer.
- Technical & Device Information: IP address, browser type, operating system, access timestamps, and error logs collected for system security, fraud prevention, and uptime monitoring.
3. How We Use Your Information
We process collected information strictly for legitimate operational purposes:
- To automatically publish and schedule posts to your connected social media channels in accordance with your configured timetable.
- To enable seamless media imports from Canva, Google Drive, Dropbox, and Unsplash into your post drafts.
- To operate the unified inbox for managing and replying to comments and direct messages.
- To calculate and visualize audience engagement, impressions, reach, and post performance analytics.
- To ensure platform security, verify user identities, and prevent malicious activities or API misuse.
- To provide customer support and comply with applicable statutory obligations.
No Sale of Personal Data: Praffer does NOT sell, rent, or trade personal data, social media content, cloud files, or OAuth tokens to any third parties for advertising, cross-context behavioral marketing, or commercial purposes.
4. Third-Party API Policies & Compliance Disclosures
Praffer integrates with third-party developer platforms via official APIs and SDKs. By connecting your accounts or cloud services, you also agree to comply with the respective platform policies:
A. Google Services (YouTube, Google Drive) & Limited Use Disclosure
Praffer uses the YouTube Data API v3, the YouTube Analytics API, and the Google Drive API to publish videos, manage comments on the user's own videos, report YouTube metrics, and allow users to select media from Google Drive.
- By using Google/YouTube features in Praffer, you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.
- Google API Limited Use Disclosure:
Praffer's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. - Prohibition on Artificial Intelligence (AI) and Machine Learning (ML) Training: User data, photos, videos, and metadata obtained through Google APIs (Google Drive, YouTube) are strictly NOT used, processed, or transferred to train, fine-tune, or develop generalized Artificial Intelligence (AI) or Machine Learning (ML / LLM) models.
- Narrow Data Scope (Picker-Only Access): For Google Drive, Praffer only accesses the specific individual files that you explicitly select via the official Google file picker. Praffer has no access to the rest of your Google Drive content.
- Revoking Google Access: You can review or revoke Praffer's access to your Google account at any time via the Google Security Permissions Settings.
B. Canva Integration (Canva Connect API)
Praffer utilizes the official Canva Connect API and Canva Button to allow users to create and edit designs in Canva and attach them directly to social posts.
- Designs are exported as high-resolution PNG/JPG files and transferred to Praffer's secure storage only upon user request.
- Canva OAuth tokens are encrypted at rest with AES-256 and used solely for design session authorization.
- Usage is governed by the Canva Privacy Policy and Canva Terms of Use.
- You may disconnect Canva integration anytime from Praffer or from your Canva account settings.
C. Dropbox Integration (Dropbox Chooser)
Praffer integrates with the official Dropbox Chooser API to let users import media files directly from Dropbox.
- Praffer only receives download links for files explicitly selected by the user inside the Dropbox Chooser dialogue.
- Selected files are transferred to Praffer's secure media server solely for post creation.
- Usage is subject to the Dropbox Privacy Policy.
D. Unsplash Integration (Unsplash API)
Praffer provides royalty-free stock imagery using the Unsplash API.
- All stock images are used under the Unsplash License.
- Download events are reported in compliance with Unsplash API guidelines to maintain proper photographer attribution.
E. Meta (Facebook & Instagram) Integration
Praffer connects with Facebook Pages and Instagram Professional accounts via the Meta Graph API for post/story/Reels publishing and inbox management.
- All operations comply with the Meta Privacy Policy and Meta Platform Terms.
- You can revoke Meta permissions at any time via Facebook App Settings or through Praffer's accounts panel.
F. TikTok Integration (Direct Post API v2)
Praffer enables video publishing and commercial content disclosure labeling via the TikTok Direct Post API v2 in accordance with the TikTok Privacy Policy and Commercial Terms.
G. LinkedIn Integration
Praffer uses official LinkedIn APIs to publish user-approved posts to personal profiles and Company Pages in compliance with the LinkedIn Privacy Policy.
5. Data Retention & Deletion Schedule
We retain your data only for as long as necessary to provide the Service or to fulfill legitimate legal requirements:
| Data Type | Retention Period | Deletion Trigger |
|---|---|---|
| OAuth Tokens (Social Networks & Canva) | Duration of account connection | Immediately and permanently erased from the database upon account disconnection. |
| Cloud Media Imports (Drive, Photos, Dropbox, Unsplash) | Until post draft or asset is deleted | Permanently purged from storage buckets when deleted by the user. |
| Inbox Data (Messages & Comments) | Duration of active account connection | Cleaned immediately when the social channel is removed or user purges the inbox. |
| Published Media Files | 180 - 395 days (by subscription tier) | Physical files purged after retention window; post metadata preserved. |
| User Profile & Account Data | Duration of membership | Permanently and irreversibly erased upon account deletion (subject to workspace ownership rules). |
For step-by-step instructions on removing permissions and deleting data, please see our User Data Deletion Instructions page.
6. Security Standards & Sub-processors
We employ robust technical and organizational measures to safeguard your information:
- All network communications are encrypted in transit via SSL/TLS (HTTPS).
- OAuth tokens and credentials are protected with AES-256 encryption at rest.
- Workspace-level multi-tenancy ensures strict isolation of client data.
Sub-processors & Cloud Infrastructure: We engage reputable infrastructure service providers under data protection agreements:
- Payment Processing: Stripe, Inc. (PCI-DSS Level 1 compliant).
- Cloud Media & File Storage: Cloudflare R2 (AES-256 encrypted storage).
- Database & Caching: PostgreSQL / Upstash Redis (Hosted in secure US/EU data centers).
- Hosting & Edge Delivery: Vercel Inc.
- Transactional Email Communications: Resend, Inc.
- Uptime Monitoring & Status Page: Better Stack, Inc. (System availability probing and incident notifications).
7. European Economic Area (EEA) & UK Rights (GDPR)
If you are located in the EEA or UK, we process your personal data under the following legal bases:
- Performance of a Contract: Providing social media scheduling, drafting, and inbox management services.
- Legitimate Interests: Securing our infrastructure, preventing spam and fraud, and maintaining uptime.
- Legal Compliance: Meeting statutory tax, accounting, and regulatory obligations.
- Consent: When you grant explicit consent for non-essential cookies.
You have the right to access, rectify, port, erase, or restrict the processing of your data. You may lodge a complaint with your local supervisory authority.
8. California Consumer Privacy Rights (CCPA / CPRA)
California residents have specific privacy rights under the California Consumer Privacy Act:
- Right to Know & Access: You may request the categories and specific pieces of personal information collected.
- Right to Delete & Correct: You may request the deletion or correction of inaccurate personal data.
- Right to Opt-Out of Sale / Sharing: Praffer does not sell your personal information or share it for cross-context behavioral advertising.
- Non-Discrimination: We will not discriminate against you for exercising your CCPA privacy rights.
- Global Privacy Control (GPC): We respect browser-based GPC signals indicating opt-out preferences.
9. Artificial Intelligence (AI) & Automated Features Disclosure
Praffer provides optional AI-assisted features (such as post caption drafting, tone adjustment, content brainstorming, and hashtag suggestions). In accordance with international transparency standards (including the EU AI Act and FTC consumer guidelines):
- Nature of AI Output: AI-generated suggestions are generated via automated statistical models and may occasionally contain inaccuracies, outdated information, or unintended phrasing. Users retain full editorial authority and are solely responsible for reviewing, fact-checking, and verifying all content prior to publishing.
- No Model Training on Private Data: Your private drafts, social posts, customer messages, and account data are NOT used to train or refine public artificial intelligence or large language models (LLMs).
10. Contact & Exercising Rights
To exercise any of your privacy rights, request data exports, or submit inquiries, please email our Data Protection team at [email protected].
Contact: [email protected]
Address: 30 N Gould St, Ste N, Sheridan, Wyoming 82801, United States
Terms of Service · Accessibility Statement · Data Deletion Instructions
Terms of Service
Last Updated: August 21, 2026
These Terms of Service ("Terms") govern your access to and use of the praffer.com website, web/mobile applications, and associated social media scheduling, analytics, and inbox services operated by Turca LLC (doing business as "Praffer", "we", "us", or the "Service"). By creating an account or using Praffer, you agree to be legally bound by these Terms.
IMPORTANT NOTICE: SECTION 12 CONTAINS A BINDING ARBITRATION CLAUSE AND CLASS ACTION WAIVER THAT AFFECTS YOUR LEGAL RIGHTS REGARDING HOW DISPUTES WITH PRAFFER ARE RESOLVED.
1. Nature of Service and Account Security
- Praffer is a software-as-a-service (SaaS) platform that allows users to manage, compose, schedule, and publish posts to multiple social media channels (Instagram, Facebook, YouTube, TikTok, LinkedIn, etc.) and manage unified inbox conversations from a single dashboard.
- To use our services, you must provide true, accurate, and current information. You are solely responsible for maintaining the confidentiality of your account credentials, passwords, and connected social media authorization tokens.
- You are fully responsible for all activities that occur under your account. You must notify us immediately at [email protected] if you detect any unauthorized access or breach of security.
- You must be at least 13 years of age (or the minimum legal age required in your country) to use Praffer.
2. Third-Party Social Media Platforms & API Terms
Praffer integrates with external social platforms using their official developer APIs. By utilizing Praffer to interact with these networks, you expressly agree to adhere to their respective terms and policies:
- Google & YouTube: By using YouTube publishing or analytics features, you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.
- Meta (Facebook & Instagram): Meta Terms of Service, Meta Platform Terms, and Instagram Community Guidelines.
- TikTok: TikTok Terms of Service and Commercial Content Terms.
- LinkedIn: LinkedIn User Agreement.
Platform Policy Violations: Violating any third-party social network policies (such as spamming, posting copyrighted content without permission, or misleading practices) may result in the suspension or termination of your Praffer account. Praffer is not liable for changes, disruptions, or restrictions imposed by third-party APIs.
3. Third-Party Media & Cloud Storage Integrations (Canva, Drive, Dropbox, Photos, Unsplash)
When using external design and cloud media tools integrated into Praffer, you must comply with their terms:
- Canva: When creating or importing designs from Canva via the Canva Connect API, you must adhere to the Canva Terms of Use. All graphic licenses and font rights remain subject to Canva's licensing rules.
- Google Drive: By importing files from Google Drive, you confirm that you hold all necessary ownership or distribution rights. Usage is subject to the Google Terms of Service.
- Dropbox: Importing media via the Dropbox Chooser is subject to the Dropbox Terms of Service.
- Unsplash: Royalty-free photos added via the Unsplash search tool are licensed under the Unsplash License (free for commercial and non-commercial use, but photos may not be sold without significant modification or redistributed as a competing service).
4. User Content, Intellectual Property & Commercial Disclosures
All text, images, videos, captions, and links that you post or schedule through Praffer ("User Content") remain solely your property and responsibility.
- You may not publish or distribute content that is unlawful, defamatory, abusive, hateful, infringing on copyrights or trademarks, or otherwise objectionable.
- You may not transmit viruses, bots, scrapers, or excessive requests that compromise our system infrastructure.
- Commercial / Sponsored Content Labeling: If your post contains advertising, sponsorship, paid partnership, or promotional material, you are legally required to activate the appropriate "Commercial Content / Paid Partnership" disclosure tag (especially on TikTok and Meta) in accordance with relevant regulatory guidelines.
5. Fair Use Policy (FUP) & Abuse Prevention
To ensure system stability, operational security, and equitable access for all users, your use of Praffer is strictly subject to our Fair Use Policy, regardless of subscription plan quotas:
- Prohibition of Automated & Burst Abuse: You may not use automated scripts, bots, scrapers, or rapid-fire tools to trigger excessive simultaneous API requests, burst scheduling, or mass webhook payloads that could disrupt Praffer's job queues (Redis/BullMQ) or server infrastructure.
- Third-Party Social API Protection: You must not engage in high-frequency posting, mass direct messaging, or spam activities that violate social network rate limits (e.g., Meta, TikTok, YouTube, LinkedIn) or risk compromising Praffer's developer credentials.
- Media Storage & Bandwidth Integrity: Cloud storage (S3/R2) is strictly provided for media intended for social publication. Using Praffer as a general file hosting service, data backup drive, or video streaming CDN is strictly prohibited. Rapid upload/delete cycles designed to circumvent storage tracking are considered abuse.
- Single-Account Integrity: User accounts and workspace seats may not be shared, rented, or resold to unauthorized third parties unless explicitly permitted under an Enterprise or Agency agreement.
- Free Workspace Limit & Trial Integrity: Each user account is strictly limited to one (1) lifetime Free workspace. Deleting and recreating workspaces, registering multiple accounts, or disconnecting and reconnecting the same social accounts across multiple free spaces to reset post quotas or circumvent storage limits constitutes intentional quota circumvention and is strictly prohibited.
- Enforcement & Throttling: Praffer reserves the right to apply automated rate limits (including per-minute upload and request throttling), temporarily restrict features, or suspend/terminate accounts found to be in violation of this Fair Use Policy without prior notice or refund.
6. Artificial Intelligence (AI) Features & Content Verification
Praffer provides optional AI-assisted tools (such as AI caption generators, hashtag recommenders, and tone assistants). AI-generated content is provided solely for drafting and ideation purposes. AI-generated outputs may occasionally contain factual inaccuracies, outdated details, or unintended statements. You retain absolute editorial discretion and sole legal responsibility for verifying the truthfulness, accuracy, intellectual property rights, and platform compliance of all AI-generated drafts prior to scheduling or publishing.
7. Copyright Infringement & DMCA Safe Harbor Notices
We respect intellectual property rights and comply with the Digital Millennium Copyright Act (DMCA). If you believe any content published via Praffer infringes your copyright, please send a formal notice to our Designated Copyright Agent at [email protected] containing:
- A physical or electronic signature of the copyright owner or person authorized to act on their behalf.
- Identification of the copyrighted work claimed to have been infringed.
- Identification of the material that is claimed to be infringing and information reasonably sufficient to permit us to locate the material.
- Your full contact information (name, mailing address, telephone number, and email address).
- A statement that you have a good faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agent, or the law.
- A statement, under penalty of perjury, that the information in the notification is accurate and that you are authorized to act on behalf of the owner.
Designated Copyright Agent:
DMCA Agent, Turca LLC
30 N Gould St, Ste N, Sheridan, Wyoming 82801, United States
Email: [email protected]
8. Subscriptions, Automatic Renewals, Plan Changes, Click-to-Cancel & Price Modifications
- Billing & Automatic Renewal: Paid subscriptions (monthly or annual) are billed automatically in advance on a recurring cycle via our payment gateway (Stripe). Monthly subscriptions operate on a rolling 30-day billing cycle starting from the initial subscription date (not calendar month-end). Unless you cancel your subscription before your billing renewal date, your subscription will automatically renew and your payment method will be charged for the applicable recurring subscription fee.
- Plan Upgrades & Billing Cycle Resets: When upgrading to a higher subscription plan mid-cycle, the billing cycle resets immediately and a new 30-day period begins. All usage quotas (such as monthly post limits) start fresh from zero with the upgraded tier's full capacity; existing media storage usage is preserved and counts against the new plan's storage limit.
- Plan Downgrades & Storage Limits: When downgrading to a lower plan tier (e.g. from Team to Solo or Free), your existing published posts and media are preserved in accordance with applicable retention periods and are not immediately deleted. If your total stored media exceeds the new tier's storage quota, you will not be able to upload new media until your usage drops below the new quota.
- Click-to-Cancel (Cancellation at Any Time): In compliance with the FTC and California Auto-Renewal Law (ARL), you can cancel your subscription at any time without difficulty directly inside your Praffer dashboard under Workspace Settings > Billing via the self-service Stripe Customer Portal, or by contacting [email protected]. Upon cancellation, you will retain access to paid features until the end of your current prepaid billing period.
- Price & Plan Modifications: Praffer reserves the right to modify subscription fees and plan limits. Any price increase applicable to existing paid subscriptions will be communicated at least thirty (30) days in advance via your registered email address or dashboard notification. If you do not agree with the updated pricing, you retain the right to cancel your subscription without penalty before the changes take effect.
- Refund Policy: Due to continuous server provisioning, storage, and API quota allocations, payments are non-refundable for partially used billing periods, except where required by applicable law.
9. Intellectual Property of Praffer
All source code, software architecture, UI design, trademarks, brand assets, and algorithms associated with Praffer are the exclusive property of Turca LLC. You may not copy, decompile, reverse-engineer, or resell the Service.
10. Service Availability, Disclaimer of Warranties and Limitation of Liability
Service Uptime & Status Transparency: Praffer provides transparent, real-time system operational status, scheduled maintenance notices, and historical uptime metrics via our public status page at status.praffer.com. Unless explicitly covered under an executed enterprise Service Level Agreement (SLA), Praffer does not warrant uninterrupted 100% uptime. Praffer shall not be held liable for scheduling delays or disruptions caused by third-party social media platform API outages, network congestion, or upstream cloud provider incidents.
"AS IS" Disclaimer: THE SERVICE IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.
Limitation of Liability Cap: TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL Turca LLC, ITS DIRECTORS, OFFICERS, EMPLOYEES, OR AFFILIATES BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES (INCLUDING LOSS OF PROFITS, DATA LOSS, LOSS OF GOODWILL, SERVICE INTERRUPTIONS, OR SOCIAL MEDIA ACCOUNT SUSPENSIONS RESULTING FROM THIRD-PARTY PLATFORM ACTIONS).
IN NO EVENT SHALL OUR TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS OR THE USE OF THE SERVICE EXCEED THE GREATER OF (A) THE TOTAL AMOUNT ACTUALLY PAID BY YOU TO Turca LLC (PRAFFER) IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR (B) ONE HUNDRED UNITED STATES DOLLARS ($100 USD).
11. Indemnification
You agree to defend, indemnify, and hold harmless Turca LLC, its officers, directors, employees, and agents from and against any third-party claims, damages, obligations, losses, liabilities, costs, or expenses (including reasonable attorneys' fees) arising from: (a) your use of and access to the Service; (b) your violation of any term of these Terms; (c) your User Content; or (d) your violation of any third-party right, including without limitation any copyright, property, privacy right, or third-party social media platform policy.
12. Dispute Resolution, Mandatory Binding Arbitration & Class Action Waiver
Informal Resolution: Before filing a claim, you agree to try to resolve the dispute informally by contacting us at [email protected]. If a dispute is not resolved within thirty (30) days of submission, you or Praffer may proceed to formal arbitration.
Mandatory Binding Arbitration: Any dispute, claim, or controversy arising out of or relating to these Terms or the Service shall be settled by binding individual arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules, rather than in court.
CLASS ACTION WAIVER: YOU AND PRAFFER AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE PROCEEDING. NO ARBITRATOR MAY CONSOLIDATE MORE THAN ONE PERSON'S CLAIMS.
30-Day Opt-Out Right: You have the right to opt out of this arbitration agreement and class action waiver by sending written notice of your decision to [email protected] within thirty (30) days of first registering your account.
13. Governing Law and Jurisdiction
These Terms shall be governed by and construed in accordance with the laws of the State of Wyoming, United States, without regard to its conflict of law principles. For any claims not subject to arbitration, you agree to submit to the personal and exclusive jurisdiction of the state and federal courts located in Wyoming, USA.
Contact: [email protected]
Address: 30 N Gould St, Ste N, Sheridan, Wyoming 82801, United States
Privacy Policy · Accessibility Statement · Data Deletion Instructions
Cookie Policy
Last Updated: August 21, 2026
This Cookie Policy explains how Praffer uses cookies and similar tracking technologies on our website and web applications. You can find detailed descriptions of each cookie category, purpose, retention period, and how to manage your preferences below.
1. What Are Cookies?
Cookies are small text files placed on your computer or mobile device when you visit a website. They are used to make websites function properly, enhance security, store your preferences, and provide analytical insights into site usage.
2. Cookie Categories We Use
Praffer uses three categories of cookies. The tables below specify the name, provider, purpose, and expiration of each. For full transparency we also list the browser localStorage entries we use; these are not cookies and are never sent to our servers.
Strictly Necessary Cookies
Essential for core features like authentication, CSRF security tokens, and active workspace loading. These cannot be disabled.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| authjs.session-token | Praffer (NextAuth) | Stores secure user session state required to keep you authenticated. | 30 days |
| authjs.csrf-token | Praffer (NextAuth) | CSRF security protection token against cross-site forgery. | Session |
| authjs.callback-url | Praffer (NextAuth) | Remembers the destination redirect URL after sign-in. | Session |
| active_workspace | Praffer | Stores the active workspace ID to load the correct organization dashboard. | 1 year |
| oauth_state / oauth_ws / oauth_pkce | Praffer | Security state verification during OAuth connection handshakes. Automatically cleared upon completion. | 10 minutes |
| invite_token | Praffer | Preserves team workspace invitation token during the sign-up flow. | 7 days |
Functional Cookies
Saves preferences like language choices (TR/EN), cookie consent, and dark/light UI themes to enhance your user experience.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| praffer-cookie-consent | Praffer | Stores your cookie consent preferences so you are not prompted on every visit. | 1 year |
| praffer_locale | Praffer | Stores your interface language preference (TR/EN). | 1 year |
| praffer-theme | Praffer (localStorage) | Saves light/dark mode UI theme preference. | Until you clear it |
Analytics and Performance Cookies
We do not currently use analytics cookies — Google Analytics measurement is switched off, so none of the cookies below are being set today. If we turn it on later, they are set only if you chose “Accept all”; choosing “Essential only” means none of them are ever written.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Assigns a randomized ID to distinguish unique anonymous visitors and calculate session data. | 2 years |
| _ga_* | Google Analytics | Maintains session state for Google Analytics 4 (GA4) pageview and event metrics. | 2 years |
Marketing and Retargeting Cookies
We do not use marketing or retargeting cookies. Praffer runs no advertising pixels or third-party ad network trackers. Should this change, this policy will be updated and your consent will be requested before any such cookie is set.
3. Third-Party Analytics Providers
No third-party analytics provider is active at the moment. Should we enable analytics measurement, it will be handled by the provider below, governed by its own privacy policy:
- Google Analytics: Google Privacy Policy
4. Managing Your Cookie Preferences
You can change your cookie preferences at any time:
- Browser Controls: You can block or delete cookies in your browser settings.
- Google Analytics Opt-Out: Install the Google Analytics Opt-out Browser Add-on to disable GA tracking entirely.
5. Statutory Compliance
This policy complies with the EU General Data Protection Regulation (GDPR), the ePrivacy Directive (EU Cookie Law), and the Turkish Law on the Protection of Personal Data (KVKK).
6. Contact Us
If you have questions about this Cookie Policy or how we use cookies and similar technologies, please contact us at: [email protected]
User Data Deletion Instructions
Last Updated: August 21, 2026
At Turca LLC ("Praffer", "we", or the "Service"), we strictly respect user privacy and data ownership. In compliance with the platform policies of Meta (Facebook & Instagram), Google (YouTube, Google Drive), TikTok, LinkedIn, Canva, and Dropbox, this page outlines step-by-step instructions on how you can request the deletion of your personal information, connected account credentials, and media files at any time.
1. Instant Data Deletion via the Praffer Dashboard
The fastest and most direct way to delete your data is through your Praffer account dashboard:
- Disconnecting Social Media Accounts: Navigate to "Accounts" in your Praffer dashboard ➔ Click "Disconnect / Delete" next to the target social account. All OAuth 2.0 access and refresh tokens, cached profile data, and synchronized inbox messages/comments associated with that account are queued for permanent deletion from our databases.
- Disconnecting External Integrations (Canva, etc.): In the Composer or your Account Settings, click "Disconnect" next to Canva or connected tools to purge authorization tokens from our system.
- Deleting Posts & Media Files: You can remove post drafts, scheduled items, and their uploaded or imported media directly from the relevant post or idea editor. Unreferenced media files are queued and eventually purged from our cloud storage buckets by background tasks.
- Complete Account Deletion: Go to "Settings ➔ Account" and select "Delete Account", or email us at [email protected]. All personal identity details and your sole-owned workspaces will be erased. Note: If you are the sole Owner of a workspace that contains other members, you must first remove those members or transfer ownership before you can delete your account.
2. Removing Permissions & Data via Third-Party Platforms
You can also revoke Praffer's authorization and delete associated app data directly from the security settings of your third-party accounts:
A. Meta (Facebook & Instagram) Data Deletion
- Log into your Facebook account and go to "Settings & Privacy" ➔ "Settings".
- From the left menu, select "Apps and Websites".
- Locate "Praffer" in the active applications list.
- Click the "Remove" button.
- In the confirmation popup, optionally check "Delete posts, videos or events Praffer posted on your timeline" and confirm removal.
- For Instagram: Open the Instagram app ➔ Settings and Privacy ➔ Website Permissions ➔ Apps and Websites ➔ Remove Praffer.
B. TikTok Data Deletion
- Open the TikTok mobile app and go to your Profile.
- Tap the top-right menu icon (three lines) and select "Settings and Privacy".
- Navigate to "Security & Permissions" ➔ "Manage App Permissions".
- Select "Praffer" and tap "Remove Access".
C. Google (YouTube, Google Drive) Access Revocation
- Visit the Google Account Permissions (myaccount.google.com/permissions) page.
- Under "Third-party apps with account access", locate and click on "Praffer".
- Click "Remove Access" and confirm. This immediately terminates all YouTube publishing and Google Drive file picker access.
D. Canva Integration Removal
- Log into your Canva account and click on Account Settings.
- Navigate to "Login & Security" or "Connected Apps".
- Find "Praffer" and click "Disconnect".
E. Dropbox Chooser Disconnection
- Log into Dropbox and navigate to "Settings ➔ Connected Apps".
- Locate "Praffer" and select "Disconnect".
F. LinkedIn Permission Removal
- Log into LinkedIn and open "Settings & Privacy".
- Go to "Data Privacy" ➔ "Other Applications" ➔ "Permitted Services".
- Click "Remove" next to Praffer.
3. Manual Data Deletion Request via Email
If you are unable to access your Praffer dashboard or wish to request an expedited, complete wipe of all your records (personal identifiers, email logs, uploaded media, connection metadata):
- Send an email from your registered address to [email protected] with the subject line "Data Deletion Request".
- Upon verifying your identity, our data protection team will queue all your database records and storage files for permanent deletion.
- A formal written confirmation will be sent to your email address once the deletion process is finalized.
4. Data Controller & Contact
For questions regarding data retention or deletion procedures:
Company: Turca LLC
Address: 30 N Gould St, Ste N, Sheridan, Wyoming 82801, United States
Email: [email protected]
Privacy Policy: Read our Privacy Policy · Accessibility Statement · Terms of Service
Accessibility Statement
Last Updated: August 21, 2026
Turca LLC ("Praffer", "we", "our", or "us") is committed to ensuring digital accessibility for people with disabilities. We are continually improving the user experience for everyone and applying the relevant accessibility standards to make our web applications, dashboard, and public pages inclusive and barrier-free.
1. Conformance Standard & Guidelines
We aim to conform to the Web Content Accessibility Guidelines (WCAG) 2.1 at Level AA standards, published by the World Wide Web Consortium (W3C). These guidelines define how to make web content more accessible to people with a wide range of disabilities, including visual, auditory, cognitive, and motor impairments.
Conformance with these guidelines also supports compliance with the Americans with Disabilities Act (ADA Title III), Section 508 of the US Rehabilitation Act, and the European Standard EN 301 549.
2. Measures Taken to Support Accessibility
To ensure accessibility across Praffer, we implement the following ongoing technical and design measures:
- Semantic HTML & ARIA: Utilizing clean semantic markup, landmark regions (
<header>,<main>,<nav>,<footer>), and appropriate Accessible Rich Internet Applications (ARIA) attributes on dynamic interactive elements, dialogs, and custom controls. - Keyboard Navigation: Ensuring that all interactive features (post composer, media selectors, navigation menus, modals, and settings) can be operated using only a keyboard with clear, visible focus rings.
- Text Alternatives (Alt Text): Providing text equivalents for non-text content, icons, and illustrations, along with built-in alt text editing fields for user-uploaded social media media assets.
- Color Contrast & Typography: Designing typography and color schemes with sufficient contrast ratios (minimum 4.5:1 for normal text and 3:1 for large text and UI components) in both Light Mode and Dark Mode.
- Responsive & Zoom Support: Ensuring fluid layouts that adapt gracefully across device viewports and support browser zoom magnification up to 200% without loss of content or functionality.
- Reduced Motion: Respecting the user's system preference for reduced motion (
prefers-reduced-motion) by disabling non-essential transitions and animations.
3. Compatibility with Assistive Technologies
Praffer is designed to be compatible with standard operating systems, modern evergreen web browsers (Google Chrome, Mozilla Firefox, Apple Safari, Microsoft Edge), and assistive technologies, including:
- NVDA and JAWS screen readers on Windows.
- VoiceOver screen reader on macOS and iOS.
- TalkBack on Android.
- Standard operating system screen magnifiers and high-contrast display modes.
4. Technical Specifications
Accessibility of Praffer relies on the following technologies to work with the particular combination of web browser and any assistive technologies or plugins installed on your computer:
- HTML5
- WAI-ARIA
- CSS3
- JavaScript (React / Next.js)
5. Known Limitations & Ongoing Improvements
While we strive to ensure total accessibility across our platform, some third-party integrations (such as embedded third-party OAuth authorization windows or dynamic previews hosted directly by external social networks) may have limitations outside our direct control. We actively work with our integration partners and continuously audit our platform to remediate any identified barriers.
6. Feedback & Formal Contact
We welcome your feedback on the accessibility of Praffer. If you encounter accessibility barriers, experience difficulty using any part of our platform, or need assistance in an alternative format, please contact our dedicated Accessibility Coordinator:
- Email: [email protected]
- Mailing Address: Turca LLC, 30 N Gould St, Ste N, Sheridan, Wyoming 82801, United States
We aim to respond to accessibility feedback and reports within two (2) business days and to propose a constructive resolution promptly.
Resmi Protokoller & Uçtan Uca Güvenlik
Tüm sosyal medya bağlantıları resmi OAuth 2.0 protokolleriyle yetkilendirilir. Hassas jetonlar AES-256-GCM ile şifrelenir ve kullanıcı verileri asla üçüncü taraflarla reklam amacıyla paylaşılmaz veya satılmaz.
Sosyal Medyanızı Güvenle Yönetin
Tüm kanallarınızı resmi API'ler ve kurumsal güvenlik standartlarıyla bağlayın. Kredi kartı gerekmez.