Privacy
DRAFT: this text has not been reviewed by a lawyer. Do not rely on it. Fill in the bracketed company details and have it reviewed for Turkish law, KVKK and, where relevant, EU GDPR before launch.
Controller
[TurkPass Ltd., address, contact email] is the data controller.
What we store
Your email, optional name, a hashed password, your balance and purchase history, and the inputs and results of your calculations.
Cookies and local storage
One essential session cookie keeps you signed in. Your language and currency choice is kept in your browser. We use no advertising cookies.
Payments and email providers
Card payments are handled by a payment provider; we do not see or store card numbers. Password-reset emails are sent through an email provider. [Name the providers and any transfers outside Turkey/EU.]
Why we process it
To create and secure your account, run and save your calculations, show your company inventory, answer support requests, and (when billing starts) take payment. [Counsel to assign a legal basis to each purpose and confirm whether any consent is needed.]
Who receives it and transfers abroad
Hosting, payment and email providers act on our behalf. [Name each provider, its location, and the transfer mechanism; counsel to confirm requirements for transfers outside Türkiye.]
How long we keep it
[Retention periods for account data, calculations, logs and billing records to be set by counsel. Self-service deletion is not yet available; email us to request deletion.]
Your rights
You can ask whether we process your data, ask for a copy, ask us to correct or delete it, and object to its use, and you can complain to the data protection authority. Contact: [email]. [Counsel to list the rights exactly as the law states and add the procedure and response time.]