KVKK Privacy Notice

1. Data controller

Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), the data controller is Emrecan Yerlikaya. Address: Beşkavaklar Mah. Necdet Gören Cad. No:19/4, Merkez / Bolu. Contact: kisaltici@gmail.com, KEP: emrecan.yerlikaya@hs02.kep.tr.

2. Personal data processed

• Identity and contact: name, email address, phone number, billing address
• Account: Firebase user ID, profile photo, username, membership plan and its term
• Service usage: created links, click times, daily usage counters, QR settings
• Transaction security: IP address (in hashed form for guest use), session and browser information
• Finance: order amount, plan, subscription status and payment result (card details are processed and stored by PayTR; we only hold a card token for recurring payments, not the card number)

3. Purposes and legal grounds

• Creating your account and providing the service: establishment and performance of a contract
• Taking payments and assigning plans: performance of a contract
• Invoice, accounting and tax records: legal obligation
• Answering support requests: performance of a contract and legitimate interest
• Service security and tracking of misuse and daily limits: legitimate interest and legal obligation

4. Method of collection

Your data is collected electronically through forms on the website, sign-in and payment steps, email correspondence and automatically while you use the service.

5. Transfers

Within Türkiye: PayTR for the payment service, the accountant and, when legally required, competent public bodies and institutions.

Abroad: Google (Firebase) for authentication, Vercel for hosting, MongoDB Atlas for the database service and Google Fonts for page fonts. These transfers are necessary to provide the service and are made within the framework of Article 9 of KVKK.

6. Retention periods

• Account and link data: until the account or the related link is deleted
• Daily usage counters: at most 35 days
• Order, invoice and accounting records: for the periods required by law (at most 10 years)
• Security records: for the periods required by law

7. Your rights

Under Article 11 of KVKK you have the right to: learn whether your personal data is processed; request information if it has been processed; learn the purpose of processing and whether it is used accordingly; know the third parties to whom it is transferred in Türkiye or abroad; request correction if it is incomplete or incorrect; request deletion or destruction within the conditions set by law; request that these actions be notified to third parties to whom the data was transferred; object to a result against you arising from analysis of the data exclusively by automated systems; and request compensation for damage caused by unlawful processing.

8. How to apply

You can send your requests in writing with identity-verifying information to the address above, to our KEP address, or to kisaltici@gmail.com from the email address registered in the system. Applications are answered free of charge within 30 days at the latest.