Privacy Policy

1. Information We Collect

1.1 Account Information

When you register, we collect your name, email address, and company details necessary to create and manage your account.

1.2 Usage Data

We collect information about how you use our platform, including features accessed, pages visited, and actions taken.

1.3 Technical Data

IP address, browser type, operating system, and device information collected for security and performance purposes.

1.4 B2B Tracking Data

Our core service processes IP addresses and WHOIS/ASN data of companies visiting our customers' websites. This relates to organizations, not individual users.

2. How We Use Your Information

• Providing and improving our services
• Account management and customer support
• Billing and payment processing
• Security and fraud prevention
• Legal compliance
• Marketing communications (with explicit consent only)

3. Legal Basis (GDPR Article 6)

• Contract performance (Art. 6(1)(b)): Account management and service delivery
• Legitimate interests (Art. 6(1)(f)): Security and fraud prevention
• Consent (Art. 6(1)(a)): Marketing, analytics cookies
• Legal obligation (Art. 6(1)(c)): Tax and accounting records

4. Data Sharing

We never sell your data. We share data only with: infrastructure providers (Standard Contractual Clauses), payment processors (PCI-DSS compliant), and authorities when legally required.

5. International Data Transfers

Data may be transferred outside Turkey using EU Standard Contractual Clauses or equivalent safeguards in compliance with GDPR Chapter V.

6. Data Retention

Account data: 3 years after deletion · Financial records: 10 years (legal requirement) · Server logs: 2 years · Marketing data: until consent withdrawn.

7. Your Rights (GDPR Articles 15–22)

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure / "right to be forgotten" (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Rights related to automated decision-making (Art. 22)

You have the right to lodge a complaint with your local data protection authority.

8. Security

TLS 1.3 encryption in transit · AES-256 encryption at rest · Two-factor authentication support · Regular security audits · Role-based access control.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect data from minors.

10. Policy Updates

We may update this policy periodically. Material changes will be communicated via email 14 days in advance.