As CHEXTA YAZILIM TEKNOLOJİLERİ A.Ş. (the "Company"), we attach great importance to the privacy of our users. This Privacy Policy explains our practices regarding the personal data collected, processed and stored while you use our services.

1. Information Collection

In order to provide our services, we may collect personal data in the following categories:

Identity Data

First name, last name, T.R. identity number, date of birth and similar information used to identify you.

Account Data

Email address, phone number, username, password (stored in encrypted form) and account preferences.

Service Usage Data

Your transactions on the platform, the features you use, session durations, interaction logs and service usage history.

Technical Data

IP address, browser type and version, operating system information, device identifiers, cookie data and access logs.

Financial Data

Billing address, payment history and subscription information. Credit card details are not stored directly by us but are processed through our PCI DSS compliant payment infrastructure providers.

2. Purposes of Information Use

The personal data collected is used for the following purposes:

• Providing, managing and improving our services
• Creation and management of user accounts
• Handling customer support requests
• Carrying out billing and payment operations
• Fulfillment of legal obligations
• Sending informational and marketing communications regarding our services (within explicit consent)
• Prevention of fraud and abuse
• Preparing statistical analyses and reports

3. Information Sharing

Your personal data is not shared with third parties except in the following cases:

• Service providers: Our business partners that provide services such as hosting, payment processing and email delivery
• Legal requirements: Notifications made to authorized institutions pursuant to court decisions, prosecutor's office requests or legal regulations
• Business transfers: Data transferred in the event of a company merger, acquisition or asset sale
• Explicit consent: Other cases where the user's explicit consent is present

4. Data Security

To ensure the security of your personal data, we apply industry-standard technical and administrative measures. These measures include SSL/TLS encryption, firewalls, access controls, regular security audits and staff training. Nevertheless, we would like to remind you that no method of data transmission over the internet or electronic storage is one hundred percent secure.

5. Cookies

Our website and platform use cookie technologies to improve the user experience, analyze site traffic, and deliver personalized content. Essential cookies are required for the services to function, while analytics and marketing cookies operate based on user preference. You can change your cookie preferences from your browser settings or from our cookie management panel.

6. Data Retention Period

Your personal data is retained for as long as the purposes of collection require or in accordance with our legal obligations. When you close your account, your personal data is securely deleted or anonymized once the statutory retention periods have expired. Financial records are kept for at least 10 years in accordance with the relevant legislation.

7. User Rights

Under Law No. 6698 on the Protection of Personal Data, you have the following rights:

• To learn whether your personal data is being processed
• To request information about it if it has been processed
• To learn the purpose of processing and whether the data is used in accordance with that purpose
• Learning the third parties to whom data is transferred domestically or abroad
• The right to request correction in case of incomplete or incorrectly processed data
• Requesting deletion or destruction within the conditions set out in the law
• To object to an adverse outcome arising against you as a result of the processed data being analyzed exclusively through automated systems

8. Policy Changes

This Privacy Policy may be updated from time to time. Significant changes will be communicated to users through our platform or via email. Your continued use after the updated policy means that you accept the changes.

9. Contact

For questions or requests about our Privacy Policy, you can reach us through the channels below:

• Email: [email protected]
• Company: CHEXTA YAZILIM TEKNOLOJİLERİ A.Ş.