Last updated: July 21, 2026
1. Data controller
Within the scope of the KârHesapla service, your personal data may be processed by KârHesapla in its capacity as data controller. Contact: destek.karhesapla@outlook.com.
2. Personal data processed
- Identity information: first and last name,
- Contact information: e-mail address,
- Customer transaction information: membership date, business type, feature interest and consent records,
- Transaction security information: session, access and technical log information,
- Basic profile information received from the provider when Sign in with Google is used.
3. Purposes of processing
Personal data may be processed for the purposes of carrying out membership and authentication processes, managing the user account, sending password reset and verification e-mails, responding to support requests, managing feature notification requests, ensuring the security of the service, improving the user experience and fulfilling legal obligations.
4. Legal grounds and collection method
Data may be collected electronically through web forms, membership processes, the Google OAuth flow, e-mail communication and automatic technical records. Processing may be based on the legal grounds of the establishment or performance of a contract, legal obligation, legitimate interest and, where necessary, explicit consent.
5. Transfer of data
Personal data may be transferred, to the extent necessary for the provision of the service, to infrastructure/technology providers such as Supabase, Resend, Netlify and Google, as well as to public authorities legally authorized to receive it. Where a transfer abroad is involved, the aim is to act in accordance with the conditions and safeguards set out in the applicable legislation.
6. Retention period
Data is kept for the period required by the purpose of processing and for the relevant statutory limitation/retention periods; when the purpose no longer exists and there is no legal impediment, it is deleted, destroyed or anonymized.
7. Rights of the data subject
Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed, to request information if it has been processed, to learn whether it is used in accordance with its purpose, to know the third parties to whom it is transferred, to request the correction of incomplete or inaccurate data, to request deletion/destruction where the conditions are met, to object to a result arising from automated analysis, and to request compensation for damage caused by unlawful processing.
8. Application method
You can send your application, together with information explaining your identity and your request, from your registered e-mail address to destek.karhesapla@outlook.com. Your request will be evaluated within the period set out in the legislation.
This text is intended for general information purposes. It is recommended that it be reviewed by a legal expert when your business model or data flow changes.