Data controller
Your personal data is processed by Vennyx Yazılım Danışmanlık A.Ş., in its capacity as data controller, within the scope described below:
- Trade name: VENNYX YAZILIM DANIŞMANLIK A.Ş.
- Address: Muallimköy Mah. Deniz Cad. No: 143/8, 1.1.C1 Blok, Zemin Kat, Kapı No: Z01, 41400 Gebze / Kocaeli
- Tax office / Tax ID: Uluçınar Vergi Dairesi Müd. / 9241072735
- MERSIS no: 0924107273500001
- Trade registry no (Gebze): 40690
- Phone: +90 (850) 242 8992
- Registered e-mail (KEP): [email protected]
- E-mail: [email protected]
Personal data processed
- Identity and contact data: full name/title, email address and (for paid subscriptions) billing information.
- Account and security data: the secure (hashed) form of your password, the organizations you belong to and your roles, session/token information.
- Customer transaction and financial data: your subscription tier, payment/invoice records, refund requests.
- Transaction security and log data: technical data required for the operation and security of the service, such as IP address, browser type, error/performance logs.
- Captured request data: the requests you send to your endpoints and their content. You decide what this content is; if it contains personal data you are its controller/administrator — take care not to send sensitive data.
Purposes of processing
- To provide the service, create and manage your account, and enforce plan limits.
- To carry out the paid subscription sales process, collect payment and issue invoices.
- To assess and finalize refund/cancellation requests.
- To ensure the security of the service, prevent abuse, and monitor and fix errors.
- To fulfill our legal obligations (e.g. invoice/accounting records).
- To communicate with you for transactional notifications (account/payment).
Legal grounds
Your personal data is processed on the following legal grounds within the scope of KVKK Article 5:
- Being necessary for the establishment/performance of a contract (art.5/2-c) — your account and subscription.
- Fulfillment of a legal obligation (art.5/2-ç) — invoice/accounting records.
- Legitimate interest (art.5/2-f) — security, prevention of abuse and improvement of the service.
- Explicit consent — obtained separately where needed, only for processing not based on the grounds above.
Transfers and cross-border transfers
To provide the service, your data is shared with a limited number of service providers (data processors) within the framework of KVKK Articles 8 and 9. Since some of these providers are located abroad, the relevant data is transferred abroad. Each provider accesses data only for its own function:
- Whop (abroad) — payment and subscription management; we do not store card data.
- Cloudflare (abroad) — hosting/infrastructure, content delivery (CDN) and security (abuse/DDoS protection).
- Paraşüt — invoice documentation and accounting processes.
- mila — delivery of transactional emails.
- Sentry (abroad) — error and performance monitoring.
Cross-border transfers are carried out within the framework of the conditions set out in KVKK Article 9 (explicit consent where needed, appropriate safeguards, or the exceptions relating to performance of a contract).
Method of collection
Your personal data is collected electronically, by automated and partially automated means, during account creation, login, product use, purchase and support correspondence.
Your rights (art.11)
Pursuant to KVKK Article 11, you have the right to: learn whether your personal data is being processed; if it is, request information about it; learn the purpose of processing and whether the data is used in accordance with that purpose; know the third parties to whom it is transferred domestically or abroad; request rectification if it has been processed incompletely/inaccurately; request its erasure/destruction where the conditions are met; request that such actions be notified to the third parties to whom the data was transferred; object to a result arising against you from analysis carried out exclusively by automated means; and request compensation if you suffer damage.
Applications
You can submit requests relating to your rights to [email protected] or to our registered e-mail (KEP)/postal address above. We finalize your request within the period stipulated by KVKK and related legislation (at the latest within thirty days). For detailed contact information, see the Contact page.