KVKK Disclosure Notice
Last updated: 9 de julio de 2026
Contents
Purpose
This notice is prepared under art. 10 of Turkey's Personal Data Protection Law No. 6698 (KVKK) to inform you how your personal data is processed by the data controller.
Data controller
Your personal data is processed by the data controller identified below. Details are updated once finalized.
Personal data processed
The following categories of personal data are processed, with the scope and retention periods shown.
| Data | Scope | Retention |
|---|---|---|
| Account data | Name, email, password hash, language preference, consent timestamp | Until the account is deleted |
| Phone | Phone number and verification status (anti-bot / real-user check) | Until the account is deleted |
| Chart images | Screenshots you upload (private, access-restricted storage) | Until account deletion; rejected/inappropriate uploads deleted immediately |
| Analysis reports | AI-generated technical-outlook reports | Until the account is deleted |
| Payment data | Plan, amount, payment status; card/wallet details held by the payment provider | For statutory retention periods |
| Audit and log data | Security events (register, login, analysis), IP address, device/browser info | Limited period for security |
| Quota counters | Monthly analysis usage counts | Per month; until account deletion |
Purposes of processing
Your personal data is processed for, and limited to, the following purposes.
| Purpose | Detail |
|---|---|
| Providing the Service | Creating and managing your account and access |
| Producing analyses | Generating technical-outlook reports from your charts |
| Security | Preventing abuse and running quota and fraud checks |
| Billing | Processing paid subscriptions and reconciling with the payment provider |
| Communication | Sending transactional email/SMS (verification, key notices) |
| Legal obligation | Meeting statutory retention and reporting duties |
Legal grounds
Processing relies on the following legal grounds set out in KVKK art. 5 and 6.
| Legal basis | Applied to |
|---|---|
| Performance of a contract | Account, analysis and billing (KVKK 5/2-c; GDPR 6/1-b) |
| Explicit consent | Risk consent and international transfers (KVKK 5/1, 9; GDPR 6/1-a) |
| Legitimate interest | Security, logging and abuse prevention (KVKK 5/2-f; GDPR 6/1-f) |
| Legal obligation | Statutory retention duties (KVKK 5/2-ç; GDPR 6/1-c) |
Domestic and international transfers
Your personal data may be transferred to sub-processors necessary to run the Service, some located abroad. International transfers rely on your explicit consent and/or appropriate safeguards under KVKK art. 9.
Your rights under KVKK art. 11
You have the right to: learn whether your data is processed; request information if it is; learn the purpose of processing; know the third parties to whom it is transferred at home or abroad; request correction of incomplete/incorrect data; request deletion/destruction where conditions are met; request that these actions be notified to third parties; object to a result against you arising solely from automated analysis; and claim compensation for damage due to unlawful processing.
How to apply
You can submit requests via the contact details below. Your application is resolved within 30 days under KVKK art. 13. You retain the right to complain to the Personal Data Protection Authority where appropriate.
Contact
For KVKK requests, use the data controller's contact details below.
Business and data-controller details
- Legal name
- [ŞİRKET ÜNVANI BURAYA GELECEK]
- Address
- [ŞİRKET ADRESİ BURAYA GELECEK]
- Tax / Registration No
- [VERGİ / REGISTRATION NO BURAYA GELECEK]
- Support
- destek@dojilab.com
- Legal notices
- [HUKUKİ TEBLİGAT E-POSTASI BURAYA GELECEK]
- Governing law
- [UYGULANACAK HUKUK / YARGI YETKİSİ BURAYA GELECEK]