Son güncelleme / Last updated: 3 Ağustos 2026 / 3 August 2026
1. Data controller
This Privacy Policy applies to the Lusi desktop application operated by Studio Mirage.
Data controller: Studio Mirage – [INSERT LEGAL NAME / LEGAL TITLE]
Website: https://www.studiomirage.com.tr
Email: hello@studiomirage.com.tr
Address: Kocasinan Merkez Mahallesi, Balaban Sokak No:4 D:8, Bahçelievler, Istanbul, Türkiye
2. Scope
Lusi is a desktop advertising management and analytics tool used with Studio Mirage’s own Meta ad accounts, Facebook Pages, professional Instagram accounts, catalogs, Pixels/datasets and WooCommerce store. Lusi is not a public social network or a consumer membership service.
This policy describes data processing in the Lusi application. Cookies, orders and other processing on the Studio Mirage website may also be governed by the website’s general privacy and cookie policies.
3. Data that may be processed
Depending on the features enabled by the user, Lusi may process:
- Names and identifiers of Meta business portfolios, ad accounts, Facebook Pages, Instagram accounts, catalogs, product sets, Pixels/datasets and related business assets;
- Campaign, ad set, advertisement and creative names, identifiers, statuses, budgets, targeting settings and delivery information;
- Advertising performance metrics such as impressions, reach, clicks, spend, add-to-cart events, checkout events, purchases, revenue and ROAS;
- Technical diagnostics, data-quality information and errors relating to Meta’s event and measurement systems;
- WooCommerce store address, API connection information and product, order, revenue and profitability data that the user chooses to synchronize;
- Advertising reports sent to an AI provider selected by the user, and analyses or campaign recommendations returned by that provider;
- Application settings, action history, error logs, security profile information and local backup information.
Lusi does not intend to collect customers’ or followers’ direct identity, contact or sensitive personal data unless required for a feature. Where imported WooCommerce files or other sources contain such information, the user is responsible for ensuring that its use is lawful, necessary and limited to the relevant purpose.
4. Purposes of processing
- Connecting to and validating Meta and WooCommerce services;
- Displaying advertising assets, performance and measurement health;
- Preparing campaign, ad set, creative and ad drafts, or sending them to Meta following the user’s explicit approval;
- Validating catalog, product set, Pixel/dataset and conversion-event relationships;
- Producing reports, profitability analyses, alerts and AI-assisted recommendations;
- Providing security, troubleshooting, audit history, backup and application development;
- Complying with legal obligations and establishing, exercising or defending legal rights.
5. Legal bases
Personal data may be processed where necessary for entering into or performing a contract, complying with legal obligations, establishing, exercising or protecting a right, pursuing legitimate interests that do not override the rights and freedoms of the data subject, and, where required, on the basis of explicit consent.
6. Local storage and security
In the current desktop version of Lusi, settings, action histories, reports and logs are primarily stored locally on the user’s Windows device. Meta access tokens, WooCommerce credentials and AI API keys are encrypted using the operating system’s protected storage mechanism where supported.
Lusi does not send the Meta access token to AI providers. If the user enables AI analysis, the advertising report and performance data required for that operation may be sent to the AI provider selected by the user.
No electronic storage or transmission method is completely secure. Users are responsible for protecting their computer, Meta account, access tokens, API keys and local backups against unauthorized access.
7. Recipients and service providers
Depending on the enabled features, data may be shared with or processed by:
- Meta Platforms: for Facebook, Instagram, Marketing API, catalog, Pixel/dataset and advertising operations;
- WooCommerce / the store server: to retrieve products and order information authorized by the user;
- The AI provider selected by the user: only when an AI feature is enabled, for analysis or content generation;
- Competent public authorities: where required by law and pursuant to a valid request.
Meta, the WooCommerce hosting provider or the selected AI provider may process data outside Türkiye. Before enabling a service, users should review that provider’s privacy policy and data-processing terms.
8. Retention
Local settings, histories and reports may be retained until the user clears them, resets the application data or removes the relevant files from the device. Data is not retained longer than necessary for its processing purpose unless a legal or technical requirement applies. Data sent to third-party services is subject to the retention rules of the relevant provider.
9. Your rights
Subject to applicable law, including Türkiye’s Personal Data Protection Law No. 6698, data subjects may request information about processing, access to their data, correction of inaccurate or incomplete data, deletion or destruction where the legal conditions are met, notification of correction or deletion to recipients, information about recipients and purposes, objection to certain automated results, and compensation for damage caused by unlawful processing.
10. Requests and data deletion
To request access, correction or deletion relating to Lusi, email hello@studiomirage.com.tr with the subject “Lusi Data Request”. Describe your request and provide an email address at which you can be contacted. For your security, do not send access tokens, API keys or passwords.
Requests will be handled as soon as reasonably possible and within the maximum period required by applicable law. Detailed deletion instructions are available at: https://www.studiomirage.com.tr/lusi-data-deletion/
11. Children’s privacy
Lusi is not directed to children and does not intentionally collect personal data from children.
12. Changes to this policy
This policy may be updated when the application’s features, service providers or applicable laws change. The current version and the date of the latest update will be published on this page.