Free checker and local continuation
Anonymous PO files are processed in bounded memory for deterministic technical findings and eligibility checks. They are not stored in our database or object storage and are not sent to OpenAI. If you choose to continue toward payment, the file and selected review options are saved on your device for up to two hours. This local data is removed after export, when you choose Remove local file, or on the next checker visit after expiry. Closing the browser can delay physical deletion until your next visit. Files uploaded for a paid review enter the existing authenticated review and retention workflow.
Optional first-party measurement
Browser journey measurement is off by default. You may opt in using the checker checkbox, and withdraw at any time. It records allowlisted stage names and random event identifiers, without file contents, filenames, emails, authentication tokens, raw IP addresses or URL parameters. The PO checker’s conversion counters use no advertising trackers or third-party analytics scripts. A local preference remembers your choice; session storage prevents duplicate stage counting. Payment fulfillment, review completion and export counters are operational server records with one-way, purpose-specific event keys. Conversion logs should be retained for at most 30 days; operational deployment must configure that retention.
Scope and responsible service provider
Turel.io is operated by HTR Dış Ticaret A.Ş.. This policy applies to the public Turel.io site, the global Turel.io account, and Turel.io products including PO Reviewer. It is the authoritative privacy policy for PO Reviewer; legacy product-specific privacy URLs redirect here.
Account and support information
We process account identifiers, email addresses, password hashes, email-verification status, session records, and security events needed to register, authenticate, secure, and support accounts. We also process information included in support correspondence. Do not send passwords, payment-card details, or sensitive PO content by email.
PO Reviewer content and history
When you use PO Reviewer, our systems process uploaded PO files and their translated strings, catalog metadata, selected languages and review options; project and review history; AI-assisted findings and human decisions; generated PO, MO, and ZIP artifacts; project glossary entries; approved translation-memory entries; usage estimates and measurements; and billing, credit, transaction, and reconciliation records.
Project and review records, glossaries, translation memory, human decisions, and retained artifacts remain available as product history until you delete the relevant review or project, or until they are otherwise removed as required for operation or law. Deleting a review or project removes the corresponding application records and associated stored artifacts. PO Reviewer does not currently provide self-service deletion of the whole Turel.io account. Contact us for privacy or account-deletion requests.
AI processing
When you choose AI review, the content needed for that review—including relevant PO strings and, where applicable, project glossary and approved translation-memory context—is sent to OpenAI for processing as the AI provider. Free structural inspection does not itself require an AI review. OpenAI processes this material to return the requested AI-assisted result; Turel.io then stores the applicable review result and history as described above.
Cookies and security information
The application uses an HttpOnly session cookie to keep you signed in and a separate CSRF cookie, read by the frontend and returned in a request header, to protect state-changing requests. These cookies are necessary for account authentication and security rather than advertising. We also process limited request, device or browser, IP-derived, usage, error, audit, and security-log information needed to operate, protect, troubleshoot, and improve the services.
Optional public-site analytics
With your permission, we use Google Analytics 4 on the public Turel.io website to understand page visits, campaign referrals, and clicks to applications, registration, and contact links. These clicks indicate interest, not completed registrations, processing, or purchases. This public-site integration does not measure activity inside PO Reviewer, Tennis Club, or account pages.
Google's analytics script loads only after you select Accept analytics. It uses first-party analytics cookies and processes page and campaign information, browser and device information, and interaction data. Requests to Google also expose network information such as your IP address. We send normalized public page paths, an allowlist of standard campaign parameters, and predefined click labels; we do not intentionally send email addresses, account identifiers, authentication tokens, uploaded files, or translation content. Advertising consent remains denied, and Google signals and advertising personalization are disabled in this integration.
Accept and Reject are both available without a preselected choice. We remember only your accepted or rejected preference in this browser's local storage; this preference contains no personal information. If browser storage is unavailable, your choice applies to the current page and may need to be made again. You can reopen Analytics preferences using the discreet control at the bottom of public pages and choose Withdraw analytics or Reject analytics. Withdrawal disables further measurement, clears accessible analytics cookies where possible, and reloads the page to unload the Google script. It does not delete data already received by Google.
You can use the public site after rejecting analytics. No Google analytics script or measurements are sent by this integration before acceptance or after a saved rejection. Analytics retention and access depend on our Google Analytics property settings. For information about Google's processing, see Google's Privacy Policy. Contact us using the address below for privacy questions or requests concerning previously collected data.
Payments
When checkout becomes available, Paddle acts as Merchant of Record for Paddle-processed purchases. Paddle processes buyer identity and contact details, payment method, order, tax, receipt, and refund information under its own privacy practices. Turel.io does not receive or store full payment-card details, but receives and retains customer and transaction references, package and fulfillment information, verified payment events, and credit-ledger records needed to provide and support the purchase.
Transactional messages such as email-verification and password-reset messages are sent through the project's configured mail provider. Where the Resend integration is enabled, the recipient address and message content are sent to Resend for delivery. The application does not currently send its own Paddle purchase receipt; Paddle is responsible for receipts for Paddle-processed orders.
Hosting and storage providers
The static Turel.io and PO Reviewer frontend is served using Turel.io infrastructure including Hostinger. The production PO Reviewer API and backend run on Railway. These infrastructure providers process or store request and service data as needed to host, deliver, secure, and operate their respective parts of the service.
Retention
The current application defaults delete successfully processed background-review input immediately after completion where that cleanup succeeds; inputs for completed, failed, or cancelled jobs are also eligible for maintenance cleanup once the job has been finished for seven days. Login sessions have a 30-day lifetime. Expired or revoked session records are eligible for cleanup after the expiry or revocation is more than 30 days old. Email-verification links expire after 24 hours and password-reset links after one hour; expired or consumed authentication-token records are eligible for cleanup after the expiry or consumption is more than seven days old.
These periods are application defaults and may be shortened by operational cleanup. Persistent project content and billing/credit records do not have a fixed automatic deletion period in the current application. Operational and security logs are retained according to operational and infrastructure-provider settings; the application does not define a single fixed log-retention duration.
Why information is used
We use information to provide requested inspection, AI review, history, and export functions; authenticate and secure accounts; administer credits and fulfill purchases; deliver transactional messages; respond to support; diagnose reliability; prevent abuse; and meet legal obligations. We do not claim ownership of customer content.
Your choices, rights, and requests
You can delete individual reviews, projects, and glossary entries through available product controls and can revoke account sessions. Depending on applicable law, you may have rights to request access, correction, deletion, restriction, or a copy of personal information, or to object to certain processing. These rights may be subject to legal exceptions and records we must retain for security, transactions, disputes, or compliance.
Privacy questions and requests may be sent to info@turel.io. Include enough information for us to identify your account or request, but do not email passwords, payment-card details, or sensitive PO file contents.