Privacy Policy

1. Who we are

Laruus ("we", "us", "our") is an online store for 3D assets produced in-house, operated by İlmiora Yazılım İnşaat Sanayi ve Ticaret Limited Şirketi, a company registered in the Republic of Türkiye and the data controller responsible for your personal data. This Privacy Policy explains what data we collect when you use laruus.com (the "Service"), how we use it, and the rights you have.

2. Data we collect

• Account data: first and last name, email address, phone (optional), country and city, and profile photo if you upload one.
• Content you create: portfolio works, blog posts, images and messages you send through the Service.
• Usage data: products you download, credit balance and transactions, favorites and activity on the Service.
• Payment data: processed by our reseller Paddle. We do not receive or store your full card details — we only receive order confirmations (e.g. product, amount, country) needed to add credits to your account.
• Technical data: IP address, browser type, device information and cookies.
• Visual search: if you search with an image, the image is processed on our own servers only to find visually similar products and is discarded right after the search. It is not stored, not added to your account and not shared with third parties.
• Sign-up source: when you create an account we record once where you first came to Laruus from: the referring website's domain name (not the full address), campaign tags in the link (such as utm_source), whether you came from an ad click, and the first page you visited. We use this only to understand which channels bring new members.

3. How we use your data

• To create and manage your account and authenticate you.
• To provide the Service: process downloads, manage credits, and enable messaging, works and blog features.
• To process purchases and add purchased credits to your wallet (via Paddle).
• To send transactional emails such as email verification codes (delivered through our email provider, Resend).
• If you opt in, to send product newsletters (new and most downloaded assets). You can unsubscribe at any time from the link in every newsletter or from your profile.
• To understand and improve the Service using analytics (only with your consent).
• To keep the Service secure and prevent abuse.

4. Legal bases

Where GDPR/KVKK applies, we process your data on the following bases: performance of our contract with you (providing the Service and processing orders), our legitimate interests (security, improving the Service), your consent (analytics and non-essential cookies), and compliance with legal obligations.

5. Payments

Our order process is conducted by Paddle.com, which acts as the Merchant of Record and payment processor. When you make a purchase, your payment information is provided directly to Paddle and handled under Paddle's own privacy policy. We do not store your card number, CVC or full payment credentials.

6. Cookies and analytics

We use essential cookies required for authentication and core functionality. With your consent, we also use Google Analytics 4 to understand how the Service is used. You can accept or decline analytics cookies via the consent banner, and your choice is stored on your device. Declining does not affect access to the Service.

Some links we share on social media and other channels (for example laruus.com/go/…) let us count how many people visit the Service through them. For visitors who are not signed in we store only the visit itself — no name, IP address or device identifier — and your browser keeps a note of the link for up to 30 days. If you are signed in when you open such a link, or sign up or sign in during that time, we record which link brought you, so that we can see which channels our members come from. We use this only to measure our own channels and do not share it with third parties.

Links in our newsletters contain a personal identifier so that we can see which newsletter brought you to the Service, which pages you opened from it, and whether you unsubscribed. We use this only to measure and improve our newsletters; we do not track whether you open the email itself.

While you are signed in, we keep a record of the pages you visit on the Service, together with the time of the visit. We use this only to understand how members use our catalogue and to support you if you contact us. We do not record this for visitors who are not signed in, and we do not use it for advertising or share it with third parties. These records are automatically deleted after a limited retention period, and you can ask us to delete yours sooner by contacting support@laruus.com. Before they are deleted, we keep only a short summary for your account — the dates of your first visit, your first return visit and your most recent visit, and the number of days on which you visited — which is removed together with your account.

7. Who we share data with

We share data only with service providers (processors) that help us operate the Service:

• Paddle — payment processing and merchant-of-record services.
• Amazon Web Services (AWS S3) — hosting of uploaded files and images.
• Resend — delivery of transactional emails and newsletters.
• Google Analytics — usage analytics (only with consent).

We do not sell your personal data. We may disclose data where required by law.

8. International transfers

Some of our processors may store or process data outside Türkiye (for example within the EU or the US). Where this happens, we rely on appropriate safeguards provided by these providers.

9. Data retention

We keep your personal data for as long as your account is active or as needed to provide the Service and comply with legal obligations. If you delete your account, we remove or anonymize your personal data, except records we must retain by law (such as transaction records).

10. Your rights

Depending on your location, you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at support@laruus.com. You also have the right to lodge a complaint with your local data protection authority (in Türkiye, the KVKK Authority / KVKK Kurumu).

11. Children

The Service is not directed to children and is intended for users aged 18 or older. We do not knowingly collect data from children.

12. Changes and contact

We may update this Privacy Policy from time to time; the "Last updated" date reflects the latest revision. For any questions or requests regarding your data, contact us at support@laruus.com.

İlmiora Yazılım İnşaat Sanayi ve Ticaret Limited Şirketi