This English version is a translation provided for convenience. If it differs from the Turkish version, the Turkish version prevails.
1.Who this policy covers
This policy covers visitors to the website, people who apply for a trial, and the authorised representatives and users of Customer accounts. We process personal data in two different capacities:
- On our own behalf (as data controller): application, account, billing, support and security records. These are the subject of this policy and of the KVKK Privacy Notice.
- On behalf of our Customer (as data processor): employee, customer and supplier information the Customer enters into the product. The Customer is the data controller for this data; the relationship is governed by the Data Processing Agreement.
2.Information we collect
- Trial application: full name, company name, email, optional phone number; the time and IP address of the application.
- Account: the user's name, email, role, sign-in records and change history within the product.
- Billing: billing name, tax or Turkish national ID number, address and phone. Card details stay with the payment institution, not with us.
- Support: your correspondence with us.
- Technical records: request and error logs for security and troubleshooting.
3.What we use information for
To open your account and verify your email, provide the Service, invoice, give support, ensure security and prevent misuse, and fulfil our legal obligations.
We don't sell your information or share it with advertising networks. The website has no advertising, analytics or social media tracking cookies; details are in the Cookie Policy.
5.Where the data is located
Our application servers and database are in Google Cloud's Belgium region (europe-west1). Some of the providers we use for sign-in, email, error logging and AI are in the USA. Transfers abroad are made with the appropriate safeguards (standard contracts) under Article 9 of Law No. 6698.
6.AI features
When you use the chat assistant or an AI feature such as document reading, only the content needed for that operation (your question, the records needed for the answer or the document to be read) is sent to the model provider. The answer is produced only from data within your permissions. This content is used for nothing other than producing the answer and is not used to train AI models; the model provider's contract also prohibits this.
7.How we protect information
- All connections are encrypted (TLS).
- Each company's data is separated in the database with row-level security; one company can't see another company's data.
- Access is defined by role and level; sensitive fields are shown masked to anyone without permission.
- Every change is recorded with who made it, when, and the old and new values.
- Our support team enters your account only when support requires it, with a time-limited and justified session; every session is recorded.
- Passwords are stored in the authentication service, not in our system. Card details never reach our servers.
- The database is protected by the managed database service's automatic backups.
8.How long we keep it
- Unverified trial applications: 90 days.
- Account and Customer data: for the term of the agreement; after it ends, 30 days for export, then deleted or anonymised within 90 days at the latest.
- Invoice and payment records: for the period required by tax and commercial legislation (up to 10 years).
9.Your rights
The KVKK Privacy Notice explains your rights regarding your personal data and how to apply. If your request concerns data our Customer has entered into the product (for example, if you are its employee or customer), you need to apply to that company; we help the company with this.
10.Contact
[Registered company name] · [Registered address] · [KVKK request email]
When we change this policy, the date at the top of the page is updated; we notify our Customers of significant changes separately.