KVKK Privacy Notice

1. Data controller

• Company: [PLACEHOLDER: Company legal name]
• Address: [PLACEHOLDER: Registered address]
• Tax ID / MERSIS No: [PLACEHOLDER: Tax ID / MERSIS number]
• Data protection contact: [PLACEHOLDER: KVKK / privacy contact email]
• Registered e-mail (KEP): [PLACEHOLDER: KEP address, if any]

2. Categories of personal data

• Identity: first name, last name, Turkish national ID number
• Contact: email address, phone number, city
• Professional: occupation, organization or company name
• Customer transactions: building, flat, tenant, rental agreement, rent, bill, expense and maintenance records; support and account deletion requests
• Visual records: profile photo, receipt photos and uploaded documents
• Transaction security: IP address, browser information, push token, error reports, session data

3. Purposes

• Concluding and performing the membership contract, creating and managing the account
• Providing the app's services, storing and reporting records
• Sending payment, agreement, trial and subscription notifications
• Answering requests and complaints, carrying out account deletion requests
• Running information security processes and preventing abuse
• Complying with legal obligations and informing authorized bodies

4. Legal bases

Your personal data are processed under KVKK art. 5/2 because processing is (c) directly related to concluding or performing a contract, (ç) necessary for the controller to comply with a legal obligation, (e) necessary to establish, exercise or defend a right, and (f) necessary for the controller's legitimate interests, provided that your fundamental rights and freedoms are not harmed.

5. How data are collected

Personal data are collected electronically, from you through the forms in the mobile app and on the website, and automatically while you use the Service. Your tenants' data are entered by you; you are the data controller for those data.

6. Transfers and international transfers

Your personal data are transferred to the providers we use for hosting, database, notification and email services: Google LLC (Firebase / Google Cloud), 650 Industries, Inc. (Expo), Twilio Inc. (SendGrid) and Resend. The database is located in the USA (Cloud Firestore nam5) and server processing takes place in the USA (us-central1) and Belgium (europe-west1).

International transfers are made under KVKK art. 9/4 by signing standard contracts and notifying them to the Personal Data Protection Board within 5 business days of signature ([PLACEHOLDER: dates the standard contracts were signed and notified to the Board]).

Your personal data may also be disclosed to authorized public authorities on request, within our legal obligations.

7. Retention

Personal data are kept for as long as the purpose requires and for the periods set by law, and are then deleted, destroyed or anonymized. Detailed periods are listed in the Privacy Policy.

8. Your rights under KVKK art. 11

• To learn whether your personal data are processed
• To request information about the processing
• To learn the purpose of processing and whether data are used accordingly
• To know the third parties in Türkiye or abroad to whom data are transferred
• To request correction of incomplete or inaccurate data
• To request deletion or destruction of data under the conditions of KVKK art. 7
• To request that corrections, deletions and destructions be notified to the third parties who received the data
• To object to an outcome against you that results exclusively from automated analysis
• To claim compensation for damage caused by unlawful processing

9. How to apply

Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your request in writing to [PLACEHOLDER: Registered address], by registered electronic mail (KEP) to [PLACEHOLDER: KEP address, if any], or from the email address registered in our system to [PLACEHOLDER: KVKK / privacy contact email].

Requests are concluded as soon as possible and within 30 days at the latest, free of charge. If the request involves an additional cost, the fee set by the Board's tariff may be charged.