KVKK (Turkish GDPR) Privacy Notice

2. Personal Data Processed

• Identity and contact: full name, email.
• Account and billing: subscription status, payment information (via our payment provider).
• Store/integration: marketplace seller ID and encrypted API keys.
• Usage data: session, transaction records, and technical logs.
• Security data: the IP address and country the account was created from and last connected from (fraud and abuse detection — legitimate interest).
• Analytics cookie data (only with consent): anonymous site traffic; not linked to an individual, and no IP address is stored in the analytics cookie data.
• Trial eligibility record: a hash (pseudonymised data) of the marketplace identifier of the store that received a free trial (the seller ID; for eMAG stores, the account username), a short masked hint, the channel, the trial dates, your internal account number and the store record's internal number (preventing abuse of the free trial — legitimate interest).

3. Purposes of Processing

• Providing the service and managing your account
• Running subscription and payment processes
• Handling support requests and ensuring security

4. Legal Grounds

Data is processed on the legal grounds of the establishment/performance of a contract, the fulfillment of a legal obligation, and legitimate interest. Where explicit consent is required, your consent is obtained separately.

5. Transfers

Data is shared with service providers such as hosting, payments, and artificial intelligence only to the extent required for the service. For transfers abroad, the safeguards required by KVKK are ensured.

6. Retention Period

Data is retained for the period required by the purpose of processing and prescribed by applicable legislation; at the end of that period it is deleted, destroyed, or anonymized.

Security data (IP address and country) is retained solely for fraud and abuse investigation, limited to the period that purpose requires. When your account is closed it is deleted together with your other account data; only to prevent abusive re-registrations, your email address, the IP address and country from sign-up and from your last connection, your name, city, plan and subscription status, and your sign-up and last-seen dates are kept in a separate record for at most 12 months from the closure date and are then deleted automatically; this record is used only to block re-registration, to investigate abuse and to identify the closed account on administrator screens. You may request earlier deletion at info@riseluc.com. Email and IP entries that an administrator has placed on the sign-up block list because of abuse fall outside this period; they are kept until the block is lifted, and you can ask at the same address for the block to be reviewed.

The trial eligibility record is kept after your account is closed so that the same store cannot receive a second free trial. It contains the hash of the store's marketplace identifier (the seller ID; for eMAG, the account username), a short masked hint, the channel, the trial dates, the internal account number and the store record's internal number; after your account is closed it is used only for this purpose.

7. Your Rights (KVKK Art. 11)

You have the right to access, rectify, and erase your personal data, to learn whether it is being processed, and to object to processing. You can submit your requests to info@riseluc.com.