Docs › Settings

Privacy

The personal data EOMA holds for billing, the marketing messages you can switch off, and the two different ways to have data deleted.

#In 10 seconds

• This screen covers billing identity only — your identity number, your phone, and the date you consented.
• Withdrawing that consent deletes those three things and cancels a paid subscription with them.
• Deleting your whole account is a different, larger request, made by email.

#Before you start

• A brand must be selected. The data shown is held against a brand, not against you personally.
• Know which of the two you want. Withdrawing consent removes billing data and ends paid access. Account deletion removes everything.
• Read the warning panel in full before confirming. Neither action can be undone from this screen.

#Steps

#1 — Open Settings, then Privacy

┌─ Settings ───────────────┐
│  PREFERENCES             │
│    Account               │
│    Notifications         │
│  ● Privacy        ← here │
└──────────────────────────┘

#2 — Check what is actually on file

Three rows under "Data on file for billing". If they are all dashes, EOMA holds no billing identity for this brand and there is nothing here to withdraw.

#3 — Set your marketing preferences

Two tick boxes. Each one saves the moment you click it — there is no Save button.

#4 — Withdraw consent only if you mean it

Withdraw consent… turns into a confirm step. Yes, withdraw and delete performs it.

#5 — For full account deletion, email us

The link at the bottom of the page goes to the data deletion instructions. If it does not open, type the address https://eoma.ai/data-deletion directly.

#What you'll see

#The header — "Privacy & data"

"Manage the personal data we hold for billing (KVKK / Turkish Personal Data Protection Law). You can withdraw your consent at any time."

#"Data on file for billing"

Three rows: Identity number, Phone, Consent recorded at. The first two are masked — you see the first two and last two characters and dots in between. That is deliberate: enough for you to recognise it as yours, never enough for anyone reading over your shoulder. With nothing on file you instead get "No billing-identity data is on file for this brand. You can submit it when upgrading to a paid plan."

#"Commercial Message Preferences"

"Manage whether you receive campaign, announcement, and promotional messages from EOMA. You can withdraw your consent at any time (ETK / Law No. 6563)." Two tick boxes — Commercial messages by email and Commercial messages by SMS — and a link to the ETK Notice.

#"Withdraw consent and delete data"

An amber panel. It states plainly what happens: your identity number, phone and consent record are permanently deleted; an active paid subscription is cancelled, you keep access to the end of the current billing period, and no renewal is charged; you would need to submit identity again to subscribe in future.

#The line at the very bottom

"Need to delete your entire account (not just billing data)? See data deletion."

#What EOMA holds, beyond this screen

The billing rows above are the only personal data this screen can delete. Across the product, an EOMA account also holds your account and in-app settings, your name, email, phone and company details, any demo request and scheduling records, and the content and analysis output generated under your account. All of it is used to run the product you bought: measuring your brand, producing your recommendations, and billing you. Full detail is in the Privacy Policy at https://eoma.ai/privacy.

#Reading the numbers

"12••••••34" on Identity number. Your national identity number as given to the payment provider, shown with the middle removed. Turkish payment rules require it for a card subscription, which is why it exists at all. It is masked on every load — the full value is never sent back to your browser after you first typed it, so no browser extension, screen recording or screenshot on this page can capture it.

"+90•••••••12" on Phone. The same treatment: country code and last two digits only.

"Consent recorded at · 3 July 2026, 14:22." The moment you agreed to EOMA holding the two values above. It is the legal anchor for the whole record, which is why withdrawing consent deletes the timestamp along with the data — the record is the consent, not just the fields.

"You keep paid access until 12 September 2026." If withdrawing consent cancels a subscription, this is the date paid access ends. You are not refunded and you are not cut off early: you paid for this period and you keep it, and no renewal is taken afterwards.

"30 days." The window inside which a full account-deletion request is processed once it reaches us, ending with a confirmation email to the address that sent it. Records we are legally required to keep — invoices and accounting documents — stay for the period the law requires, and aggregated data already shared with analytics providers is subject to those providers' own deletion tools.

#When it goes wrong

#Related

• Plan and usage — what cancelling a subscription does on its own
• Notifications — the action emails, which are separate from marketing messages
• Account — your sign-in email and two-factor sign-in