Personal Data Protection Disclosure

Your personal data is processed by the data controller identified below, in accordance with Turkish Personal Data Protection Law No. 6698 (KVKK/PDPL):

When you register for and use the Tekeralab platform, the following personal data is processed:

• Identity data: First name, last name
• Contact data: Email address
• Account and transaction data: Username, hashed password, account creation date, last login date
• Preference data: Language preference (Turkish / English)
• Technical and log data: IP address, browser type, session cookies, platform usage logs
• Content data: Brand information and content created through the platform
• Contact form data: If you write to us through the contact form — your name, email address, subject and message, plus technical data (a one-way hash of your IP address and your browser type)

Your personal data is processed for the following purposes:

• Creating and managing your user account
• Providing and improving platform services
• Identity verification and account security
• Email verification, password reset, and notification communications
• Fulfilling legal obligations
• Identifying and resolving technical issues
• Measuring and improving service quality

Your personal data is processed on the following legal grounds under Article 5 of the KVKK:

• Performance of contract: Operations necessary to deliver the services covered by the user agreement
• Explicit consent: The KVKK disclosure and Terms of Service you accepted at registration
• Legitimate interest: Ensuring platform security and operating the technical infrastructure
• Legal obligation: Record-keeping and reporting requirements under applicable regulations

Your personal data may be shared with the following categories of recipients under Articles 8 and 9 of the KVKK:

• Infrastructure and hosting providers: Server services (domestic data center), database and storage services
• CDN and security infrastructure provider: Cloudflare (content delivery network, DDoS and WAF protection). Site traffic passes through this layer, and copies of media files published on the platform are temporarily cached on Cloudflare edge servers outside Turkey for speed and availability. The master copy of the data continues to be held in our domestic data center. Details: Cloudflare Privacy.
• Email service providers: For the delivery of verification and notification emails
• Analytics and performance service providers: Google Analytics, Meta Pixel and Microsoft Clarity (heatmaps, session recordings, error detection). PII fields such as passwords and card numbers are masked automatically. IP addresses are not collected by Clarity. Details: Google Privacy, Meta Privacy, Microsoft Privacy. Data retention is 90 days. These transfers take place on the basis of explicit consent; declining via the cookie banner disables them.
• AI service provider: OpenAI (United States). When you use the platform's AI-assisted features — such as the Director strategy chat, brand profile suggestions and profile extraction from the website or Instagram address you supply, content topic suggestions, campaign planning and video copy generation — the relevant text data is sent to OpenAI's servers in the United States in order to produce the response you asked for: your brand profile (brand name, industry, target market, brand voice, product summary, unique selling proposition, website and social media addresses), the request text you write for that feature, the last 20 messages of the Director session you are in, the content retrieved from the address you supplied for extraction, and the file names, captions and hashtag text in your media library. The media files themselves are not sent to OpenAI, and the transfer takes place only at the moment you use these features. A second path to the same provider is the AI advisor bubble that is open to everyone on our site: no account is required to use it, and what you write into it — the last 12 messages of that conversation — is sent to OpenAI in order to generate the reply; this conversation is not stored on our side. Details: OpenAI Privacy.
• Authorized public authorities: When required by law, with relevant official bodies

Your personal data is not sold, shared, or rented to third parties for any purpose beyond those stated above.

Your personal data is collected through:

• Registration and login forms (directly from you),
• Automatic means during platform use (cookies, log records),
• The contact form on our website (directly from you),
• Updates made on your account settings page.

Data you send through the contact form is processed only to answer your message, on the basis of our legitimate interest (KVKK Art. 5/2-f), and is deleted after 2 years at the latest.

Your personal data is retained for as long as your account is active and for a maximum of 5 years after account deletion, in compliance with applicable legal retention obligations. You may submit an account deletion request to [email protected].

In accordance with Article 11 of the KVKK, you have the right to apply to the data controller and exercise the following rights:

• Learn whether your personal data is being processed
• Request information about the processing if it is
• Learn the purpose of processing and whether it is used accordingly
• Know the third parties to whom your data has been transferred, domestically or abroad
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of your data within the conditions set out in Article 7 of the Law
• Request that correction, deletion, or destruction be notified to third parties to whom data was transferred
• Object to a result arising to your detriment through analysis of processed data by automated systems exclusively
• Claim compensation for damages suffered due to unlawful processing of your data

You may submit your requests in writing to Kadri Melli Business Center, Güvenlik District, 282nd St. No:10, Suite 6, Floor 3, Muratpaşa, 07030 Antalya / Turkey or by email to [email protected]. Requests will be responded to within 30 days.

The platform uses strictly necessary cookies for session management and security. Analytical cookies are only activated with your explicit consent. You can manage your cookie preferences through your browser settings.

This disclosure may be updated from time to time. Significant changes will be communicated to your registered email address. The current version is always available at tekeralab.com/kvkk.html.

This disclosure is prepared by Tekera Teknoloji Ticaret ve Sanayi Limited Şirketi pursuant to Turkish Law No. 6698 (KVKK).