This English translation is provided for information only. In case of any discrepancy, the Turkish version prevails.
At Tekyerden, we care about the privacy of our users and the protection of their personal data. This Privacy Policy explains which personal data is collected during the use of the services offered at tekyerden.co and panel.tekyerden.co, how it is processed, for what purposes it is used and how it is protected.
By using our services, you are deemed to have accepted the terms set out in this policy.
1. Data Controller
The data controller under Law No. 6698 on the Protection of Personal Data ("KVKK", Turkey's Personal Data Protection Law) is:
2. Personal Data Collected
During general website visits
- IP address, browser and device information
- Cookie data
- Website usage and interaction data
When creating and using a Panel account
- First name, last name, email address, phone number
- Company name, tax ID number, tax office, address information
- Password (stored in encrypted form; never kept in plain text)
Customer data managed through the Panel
- Customers' first name, last name, company, phone, email, address and tax information
- Invoice, e-invoice (e-Fatura), quote, payment and order records
- Appointment and calendar information
WhatsApp Business messaging data
- WhatsApp Business account identifiers (Phone Number ID, WABA ID)
- Content of incoming and outgoing messages and conversation history
- Message status information (delivered, read, failed)
- Metadata of shared media files
Other communication data
- SMS delivery records
- Email delivery records
- Customer survey responses
3. Purposes of Processing Personal Data
- Carrying out invoice, e-invoice (e-Fatura), quote and payment transactions
- Enabling customer communication via WhatsApp, SMS and email
- Fulfilling legal obligations, in particular the e-invoice (e-Fatura) requirements of the Revenue Administration (GİB)
- Providing appointment and calendar management
- Providing and developing the services and improving the user experience
- Carrying out security and fraud prevention processes
- Managing support and request processes
- Carrying out business partnership and integration processes
4. Storage and Protection of Personal Data
Tekyerden implements the necessary technical and administrative measures to ensure the security of personal data.
- All communication is encrypted with HTTPS/TLS
- Passwords are stored hashed with the bcrypt algorithm; no plain-text passwords are kept
- Card and payment information is not stored in our system; it is transmitted directly to the payment infrastructure
- Panel access is role-based: the main user, sub-user and admin roles are authorized independently of each other
- Servers are hosted on physical infrastructure located in Turkey
| Data Type | Retention Period |
|---|
| Invoice and e-invoice (e-Fatura) records | 10 years (under the Tax Procedure Law) |
| Payment and financial records | 10 years (under the Tax Procedure Law) |
| Customer database | While the account is active + 2 years |
| WhatsApp conversation history | While the account is active |
| SMS and email delivery logs | 1 year |
| Technical system logs | 90 days |
Data whose retention period has expired is deleted, destroyed or anonymized in accordance with KVKK.
5. Transfer of Data
Your personal data may be shared with third parties on a limited basis in the following cases:
- Fulfillment of legal obligations
- Provision of payment and infrastructure services
- Operation of integrated service providers
Your data is not sold to third parties for commercial purposes without your explicit consent.
6. Services Used and Third-Party Services
Messaging and Social Media
Payments
- Licensed payment institution — The infrastructure of a payment institution authorized under Law No. 6493 on Payment and Security Settlement Systems, Payment Services and Electronic Money Institutions is used to carry out online payment transactions. Card information is not stored in our system.
e-Invoice
- Turkcell / ePlatform (iSIM360) — Used for sending e-invoices (e-Fatura) to GİB and for taxpayer verification.
SMS
- Verimor — Used for sending informational and verification SMS messages.
Electronic Signature
- TapSign — Used to carry out electronic signature transactions.
Infrastructure and Security
- Cloudflare — Used for security, DDoS protection, SSL and performance optimization.
7. Special Use of WhatsApp Data
Matters that must be expressly stated under Meta's WhatsApp Business API policy:
Message data processed through the WhatsApp Business API can be viewed only by the authorized users of the relevant business account; it is not used for advertising purposes, and it is not shared with or sold to third parties.
- The WhatsApp Business API is used only for communication between a business and its customers
- Meta's WhatsApp Business API Terms of Use apply
- When an account is closed, WhatsApp message data is deleted upon request
8. Use of Cookies
The Tekyerden website and Panel use cookies. Cookies are used for session management, authentication and remembering user preferences. The Panel uses only strictly necessary session cookies; no advertising or third-party tracking cookies are used.
You can delete or block cookies through your browser settings; however, some features may then not work.
9. Your Rights Under KVKK
Under Article 11 of KVKK, you have the right to:
- Learn whether your personal data is being processed
- Request information about it if it has been processed
- Learn the purpose of processing and whether the data is used in line with that purpose
- Request correction of incompletely or inaccurately processed data
- Request the deletion or destruction of the data
- Learn the third parties to whom the data has been transferred
- Object to decisions resulting from analysis by automated systems
- Claim compensation if you suffer damage
You can submit your requests to destek@tekyerden.co.
10. Transfer of Data Abroad
Due to the use of Cloudflare, Meta (WhatsApp Business API, Instagram, Facebook) and similar international service providers, your personal data may be transferred abroad in accordance with KVKK and the relevant legislation.
11. Policy Updates
Tekyerden reserves the right to amend this Privacy Policy whenever it deems necessary. In the event of significant changes, a notification is sent to your registered email address. The current policy is always available at tekyerden.co/en/privacy-policy and panel.tekyerden.co/gizlilik-politikasi.
12. Effective Date
This Privacy Policy entered into force on May 14, 2026.
