Privacy Policy

1. Data Controller

At E-Kolay İş, we take the protection of your personal data seriously. As data controller under the Turkish Personal Data Protection Law (KVKK, Law No. 6698), we process your personal data for the purposes described below.

For the data your business records on the platform (for example records about your own customers, suppliers and employees), your business is the data controller; E-Kolay İş acts as a data processor for that data.

2. Data We Collect

The following personal data may be collected through our platform:

• Name and contact information (email, phone)
• Company name and title
• Information shared via the demo request form
• Platform usage data and session information (including sign-in IP records)
• Messages you write to the in-app AI assistant
• Cookie data and browser information

3. Purpose of Data Processing

Your personal data is processed for the following purposes:

• Evaluating demo requests and establishing contact
• Providing and improving platform services
• User account management and security
• Fulfilling legal obligations
• Statistical analysis and performance monitoring

4. Data Storage and Security

Your data is protected with industry-standard security measures. Multi-tenant architecture ensures each customer's data is fully isolated. Row-Level Security (RLS) policies provide row-level access control. All data transmission is encrypted with SSL/TLS.

The platform and its database run in Hetzner Online GmbH data centers in Germany; Hetzner acts as a data processor in this capacity.

Main retention periods:

• User activity (audit) records: 24 months; financial and legal records: 10 years
• AI assistant chat logs: 90 days (may be reviewed by the platform operator for security purposes)
• Sign-in IP records: 24 months
• Technical and telemetry logs: 90 days

5. International Data Transfers

To provide the service, data is transferred to the following providers:

• Hetzner Online GmbH (Germany) — platform hosting and backups
• Anthropic (USA) — the in-app AI assistant; your questions and report results are processed, identifiers such as national ID, IBAN and salary are automatically masked; free-text content you write may fall outside the masking scope
• Resend (USA) — delivery of website form submissions by email
• Vercel (USA) — website hosting and, only with your consent, anonymous usage statistics

e-Document processes use providers established in Türkiye. Online payment infrastructure is not yet live; the provider will be announced on this page when it launches.

6. Cookies

Besides essential cookies, our website uses anonymous analytics only with your explicit consent; if you do not accept, no analytics tracker is loaded. You can change your choice at any time via the "Cookie Preferences" link in the footer. Session cookies in the application are required for the platform to function.

7. Your Rights Under KVKK

Under Article 11 of KVKK, you have the following rights:

• Learn whether your personal data is being processed
• Request information about processing if it has been processed
• Learn the purpose of processing and whether data is used accordingly
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of your data
• Request notification of third parties about data processing
• Object to results arising from automated analysis of your data
• Claim compensation for damages caused by unlawful processing

8. Contact

For requests regarding your personal data, please contact us at info@ekolayis.com. Requests are resolved within 30 days at the latest, as required by KVKK.