KVKK Privacy Notice

1. Data controller

[Company Legal Name], [Address], MERSIS: [MERSIS number], KEP: [registered e-mail (KEP) address] (the "Company") is the data controller under Law No. 6698 ("KVKK").

2. Categories of personal data

• Identity: full name, national ID number (for invoicing)
• Contact: email address, phone (in sales inquiries), billing address
• Customer transactions: subscription, invoice, credit and payment records
• Transaction security: IP address, session and device information, audit logs, password hash, 2FA data
• Marketing: consent to commercial electronic messages
• Audio-visual records: personal data contained in media you upload
• Third-party data: public usernames and comment text on comments received by your connected accounts

3. Purposes

• Running membership and contract processes and providing the Service
• Planning, publishing and reporting social media content
• Generating AI content and reply suggestions on request
• Finance, accounting and invoicing
• Information security and prevention of unlawful use
• Meeting legal obligations and informing authorized bodies
• Product and campaign communication where you have consented

4. Legal grounds and method of collection

Personal data is collected electronically through the sign-up form, the application interface, the APIs of the social platforms you connect, the payment provider and cookies.

Data is processed under KVKK Art. 5/2 on the grounds of (c) the establishment and performance of a contract, (ç) compliance with legal obligations, (e) the establishment, exercise or protection of a right and (f) legitimate interest; and, for commercial electronic messages and where required for international transfers, on your explicit consent under Art. 5/1 and Art. 9.

5. Transfers

Personal data may be transferred, limited to the purposes above, to hosting and storage providers, payment institutions, AI service providers, the social media platforms you connect on your instruction, notification service providers, legally authorized public bodies and our business partners. As some providers are located abroad, transfers are made in accordance with KVKK Art. 9.

6. Your rights under KVKK Art. 11

You may apply to the Company to:

• Learn whether your personal data is processed and request information if so
• Learn the purpose of processing and whether data is used accordingly
• Know the third parties in Türkiye or abroad to whom data is transferred
• Request correction of incomplete or inaccurate data, deletion or destruction under Art. 7, and notification of these actions to third parties
• Object to outcomes against you arising exclusively from automated analysis
• Claim compensation for damages caused by unlawful processing

7. How to apply

You can submit requests in line with the Communiqué on the Principles and Procedures for Applications to the Data Controller by email from your registered address to [data protection email address], via [KEP address], or in writing to [Address]. Requests are concluded free of charge within 30 days at the latest; if the action requires additional cost, the fee schedule set by the Board may apply.