This Privacy Policy explains how we collect, process, store, and protect your personal data when you use our platform for digital products, software licences, e‑commerce, and related services. By accepting this Policy or using our services, you acknowledge processing as described below, subject to mandatory legal requirements.
1. Data controller and scope
The platform operator complies with applicable personal data protection laws, including where relevant the Turkish Personal Data Protection Law (KVKK) and the EU General Data Protection Regulation (GDPR). This Policy covers our website, customer accounts, vendor panel, payment and download flows, support requests, marketing communications, and cookies.
2. Categories of data
Depending on the service, we may process:
- Identity and contact: name, email, phone (optional), billing or company details.
- Account and transactions: username, password hashes (never stored in plain text), order history, product and licence records, download logs.
- Payments: transaction references from payment providers; full card numbers are not stored on our systems.
- Technical and usage: IP address, browser type, device information, session identifiers, error and performance logs.
- Support: messages and attachments you send to support; call records where applicable.
- Marketing (with consent): preferences for newsletters, campaigns, and segmentation.
3. Purposes and legal bases
We process personal data for: performing contracts; complying with legal obligations; legitimate interests (security, fraud prevention, service improvement); and, where applicable, your consent (e.g. marketing emails).
4. Cookies and similar technologies
We may use cookies and local storage for sessions, security, remembering preferences, and analytics. Strictly necessary cookies are required for the service; analytics or marketing cookies may be controlled via preference tools or browser settings. Third‑party cookies are governed by those providers’ policies.
5. Sharing of data
We share data only as needed to provide the service—with hosting, email, payment, analytics, backup, and support partners—and with authorities when required. Processors are bound contractually and technically. Cross‑border transfers follow applicable safeguards (adequacy decisions, standard contractual clauses, consent, etc.).
6. Retention
We retain data for as long as necessary for the purposes above and as required by law or limitation periods. On account deletion requests, we delete, anonymise, or restrict data except where retention is legally required or justified (e.g. accounting, disputes).
7. Security
We apply encryption, access controls, logging, backups, and periodic security reviews to reduce risks of unauthorised access, disclosure, or loss. No transmission over the internet is 100% secure; you should use strong passwords and two‑factor authentication where available.
8. Your rights (KVKK / GDPR)
Depending on applicable law, you may have rights of access, rectification, erasure, restriction, objection, data portability, and withdrawal of consent. Requests may require identity verification and will be answered within reasonable timeframes. You may lodge complaints with your local supervisory authority.
9. Children’s privacy
Our services are not directed at children under 18. We do not knowingly collect data from minors. If you believe we have, please contact us.
10. Automated decisions and profiling
We may use automated analysis for fraud scoring, risk classification, or segmentation. Where law requires, you may request human review of decisions that significantly affect you. Marketing profiling without consent or after withdrawal of consent will not occur.
11. Data breach notification
If a breach likely affects your personal data, we will take reasonable steps to notify authorities and, where required, you, within applicable legal deadlines.
12. Changes to this Policy
We may update this Policy for legal or operational reasons. Material changes will be announced on the site and may be communicated by email. The effective version is published with its effective date.
For questions, use the contact channels indicated on the site.
