Privacy notice (KVKK)

Data controller: [Talivio Technology OÜ, Ahtri tn 12, 15551 Tallinn, Estonia] — representative / contact in Türkiye: [name, address, email].

What data we process: account details (name, email, password hash), workspace and team roles, the studies and forms you create, your support and subscription requests, security logs (sign-in time, rate-limit records), subscription and invoice details.

Purposes and legal bases (KVKK art. 5):

• Opening your account and providing the service — conclusion and performance of a contract (art. 5/2-c).
• Security and prevention of abuse — legitimate interest (art. 5/2-f) and legal obligation (art. 5/2-ç).
• Invoicing and accounting — legal obligation (art. 5/2-ç).
• Product announcements — only with your explicit consent (art. 5/1); every email carries an unsubscribe link.

Transfers: hosting and email infrastructure [hosting provider, country], payment provider [iyzico/PayTR], Talivio group services (single sign-on). Transfers abroad: [KVKK art. 9 basis — standard contract / explicit consent; to be determined by counsel].

Retention: for as long as your account stays open; after you delete your account, data is erased within [30] days, and invoice records are kept for the statutory period ([10] years).

Your rights (KVKK art. 11): to access, correct and erase your data, to object to its processing, to learn which third parties it was transferred to, and to claim compensation for damage. To apply: [[email protected]]; we reply within 30 days at the latest.