Last updated: 9 October 2026
Privacy
In short
This site uses no advertising, analytics or tracking cookies and does not track visitors. You do not need to give us any personal data to read the pages.
When you choose to use the AI assistant or tools, what you write is sent only to our single AI provider, Anthropic, to generate a reply; some personal data patterns are hidden automatically before sending. A strictly necessary security cookie counts your free preview. Details and your rights are below.
Data controller
Data controller: Talha KARATAŞ (an individual), Bursa, Türkiye. WORLDROX is the name of this person’s business and of this site.
Contact and KVKK request address:
Hosting
The site and our server code that handles AI requests (Cloudflare Workers) run on Cloudflare’s infrastructure. Cloudflare may process technical connection data such as IP addresses under its own policies to keep the service secure and available.
Our application code does not log request or response content (chat, tool fields, brief); observability and log features are kept switched off in our Worker configuration. Cloudflare’s platform-level security and infrastructure processing is outside the scope of this setting.
AI assistant and tools
Optional: The WORLDROX assistant, the export file simulator and the workflow check are optional; you start a chat or a tool yourself. Reading the site does not depend on them. Before first use you see this information and give explicit consent with a separate checkbox; the box is not pre-ticked, and if you do not consent, nothing is sent.
What data: What you type into the chat box and the tool forms (e.g. a product description, the destination country, a description of your workflow), the chat history in that tab (as context for the next reply) and the page language. Do not enter names, phone numbers, email addresses, identity information or company secrets.
Hiding: Before sending, our server automatically replaces email addresses, phone numbers, Turkish ID numbers, tax numbers, IBANs and card numbers with “[gizlendi]” (hidden) and tells you so. This is a pattern-based safeguard: it does not recognise names, company names, addresses or trade secrets and cannot catch every piece of personal data. The raw text exists temporarily in your browser and in the server’s memory until it is hidden.
Recipient and transfer abroad: The hidden content is sent to generate a reply only to our single AI provider, Anthropic PBC (Claude; United States); it is not sent to any other AI provider. If the content includes personal data, this is a transfer abroad, and we ask for your explicit consent to it separately. Transfers abroad are subject to the conditions in Article 9 of Turkey’s Personal Data Protection Law (KVKK, Law No. 6698); explicit consent and technical hiding do not mean that all of these conditions are met, and the other grounds for the transfer are being assessed separately. Anthropic processes the content under its own commercial API terms and privacy policy (anthropic.com/legal/privacy).
Purpose: Only to answer your question or the tool form. The content is not used for marketing, profiling or any other purpose.
Retention: WORLDROX does not store chat or tool content on its servers or write it to application logs; the content is processed temporarily in server memory only while the reply is generated. The chat lives in your browser tab’s memory and ends when you close the tab. When you move the assistant to full screen, the chat is carried once in the tab’s session storage (sessionStorage) and deleted as soon as the new page reads it. Your consent is also kept only in that tab’s session storage, together with the version of the consent text. How long Anthropic keeps the content depends on its own API policies; our application code does not control it.
Quota ticket cookie: The first time you use the assistant or the tools, a cookie named “wrx_q” is placed in your browser. Its only purpose is to count your free preview (15 replies and 3 tool runs per 30 days) and to prevent abuse. It contains a randomly generated ID and a signature that prevents forgery; it does not contain your name, your IP address or what you wrote. It lasts 30 days, is sent only to this site’s /api addresses, cannot be read by scripts on the page (HttpOnly) and is not shared with other sites. It is a strictly necessary security cookie for the service to work safely; it is not used for advertising or tracking. The server keeps only a one-way hash of this ID and a usage count; expired records are deleted on the next request to the service. You can delete the cookie in your browser; you will then get a new ticket, while the overall limit for the same network still applies.
Abuse prevention: To limit excessive use, your IP address is turned into a one-way salted hash and used only for counting: with a secret value that changes every day for the hourly and daily request limits, and one valid for at most 30 days for the 30-day quota. Our application does not store the IP address itself. Expired counters and secret values are deleted on the next request to the service. For the budget, only the monthly total spend is stored; it is not linked to any person.
Brief: “Create brief” has the AI write the brief from your hidden chat history; the brief is not stored on our server. “Send by email” opens your own email app; nothing is sent automatically. If you send the email, the “When you write to us” section below applies.
Withdrawing consent: You can withdraw your consent with the “Withdraw my consent” button in the assistant or a tool, or by closing the tab; after that nothing is sent until you consent again. Withdrawing does not delete content already sent from Anthropic. Replies are preliminary information, not an official opinion, customs ruling or quotation.
When you write to us
Contact links and the brief button on the site open your own email app; the site does not send email on your behalf. When you send an email, your message is received and processed in our mailbox on Microsoft 365 (Exchange Online).
Your sender address, your message and any attachments are used only to reply to you and to carry out the work you ask for; they are not sold to third parties or added to marketing lists. Microsoft, as the provider of the mail service, processes this content under its own terms.
Your rights and how to apply
Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed and, if so, to request information about it; to learn its purpose and whether it is used for that purpose; to know the recipients it is transferred to; to ask for it to be corrected if incomplete or wrong, and erased where the conditions are met; to ask for these actions to be notified to recipients; to object to a result of automated analysis; and to claim compensation if you suffered damage.
Applying (KVKK Article 13): You can send your request to the data controller in writing or by other methods set by the Personal Data Protection Board. For an electronic request, write to hello@worldrox.com from an email address you have previously given us and that is in our records. The information a request must contain is set out in the Communiqué on the Procedures and Principles of Application to the Data Controller; we ask only for the additional information needed to verify your identity. Do not enter identity details in the assistant or the tools.
Your request is answered as soon as possible according to its nature and within 30 days at the latest, in writing or electronically. Requests are free as a rule; if the action involves an additional cost, a fee set by the Board’s tariff may be charged. If your request is rejected, you find the answer insufficient, or it is not answered in time, you can complain to the Personal Data Protection Board.