Privacy Policy

1. Information We Collect

When you sign up or use our services, we collect: name, email, billing address, payment information (processed by our payment processor — we do not store full card numbers), phone number (optional), and account preferences. We also automatically collect: server access logs (IP, timestamps, requested URLs), service usage data (bandwidth, storage), and security event logs.

2. How We Use Information

We use your information to:

• check_circleProvide and maintain the services you ordered
• check_circleProcess payments and send invoices
• check_circleCommunicate about your account, services, and policy changes
• check_circleProvide customer support (we may access your account to help troubleshoot, with your permission)
• check_circleDetect and prevent fraud, abuse, and security incidents
• check_circleComply with legal obligations (court orders, tax law, etc.)
• check_circleImprove our services based on aggregate usage patterns

3. Data Sharing

We do not sell your personal data. We share data only with: (a) Service providers who help us operate (payment processors, transactional email providers, fraud detection) — all bound by data processing agreements. (b) Law enforcement when legally required (we challenge overly broad requests). (c) Successor entities in case of acquisition or merger.

4. Customer Data on Our Servers

You retain full ownership of all data you store on our infrastructure. We do not access this data except: (a) when you authorize support to do so, (b) to investigate security incidents affecting our infrastructure, or (c) when legally required. We never use customer data for advertising or train AI models on it.

5. Data Storage and Security

Personal data is stored in our Tier III+ data center in Turkey. We use industry-standard security: encryption at rest and in transit, access controls based on least-privilege, regular security audits, and incident response procedures. We will notify you of any breach affecting your data within 72 hours per GDPR/KVKK requirements.

6. Your Rights

Under GDPR (EU) and KVKK (Turkey), you have the right to:

• check_circleAccess your personal data (export available from your client area)
• check_circleCorrect inaccurate data
• check_circleDelete your data (right to be forgotten) — subject to legal retention requirements
• check_circleRestrict processing in certain cases
• check_circleData portability (export in machine-readable format)
• check_circleObject to processing based on legitimate interest
• check_circleWithdraw consent at any time
• check_circleLodge a complaint with your local data protection authority

7. Cookies and Tracking

We use essential cookies for authentication and security. Analytics cookies are loaded after explicit consent. We do not use third-party advertising cookies or social media trackers on our site.

8. International Data Transfers

Personal data is primarily stored in Turkey. Some service providers (payment processors, email service, fraud detection) are located in the EU and US — we ensure adequate safeguards via Standard Contractual Clauses (SCCs) and equivalent measures.

9. Retention

Account data: retained while you have an active account, plus 5 years after closure (legal retention for tax/dispute resolution). Server access logs: 12 months. Marketing data: until consent withdrawn. You may request earlier deletion subject to legal requirements.

10. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us for prompt deletion.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email at least 30 days before taking effect.

12. Contact

Data Protection Officer: [email protected] · General support: [email protected] · Headquarters: Izmir, Turkey.