Privacy Policy

1. Introduction

As MobiCraft Dijital Teknolojiler Limited Şirketi ("Yanıtly", "we", "our"), we attach great importance to the privacy of your personal data. This Privacy Policy explains how personal data collected through the yanitly.com website and Yanıtly platform ("Service") is processed.

This policy has been prepared in accordance with the Personal Data Protection Law No. 6698 ("KVKK"), the European Union General Data Protection Regulation ("GDPR"), and other relevant legislation.

2. Data Controller

The legal entity acting as the data controller in the processing of your personal data:

Company: MobiCraft Dijital Teknolojiler Limited Şirketi
Address: Ziya Gökalp Mah. Muhsin Ertuğrul Cad. No: 3, Başakşehir / İstanbul
Email: [email protected]

3. Personal Data Collected

We process personal data in the following categories to provide our services:

3.1. Identity Information

Data that allows us to identify you, such as name, surname, username, and company name.

3.2. Contact Information

Data that allows us to communicate with you, such as email address, phone number, and postal address.

3.3. Account Information

Encrypted password, account preferences, subscription plan, payment history information.

3.4. Usage Data

Platform usage statistics, session durations, feature usage data, performance metrics. This data is processed anonymously to improve service quality.

3.5. Technical Data

Technical information such as IP address, browser type and version, operating system, device information, cookie data, and access logs.

3.6. Customer Communication Data

Conversation content, messages, and attachments between your end users through our platform. This data is under your data controllership, and Yanıtly acts as the data processor.

4. Purposes of Data Processing

Your personal data is processed for the following purposes:

Providing, managing, and improving our services
Conducting account creation and authentication processes
Processing subscription and payment transactions
Responding to customer support requests
Fulfilling legal obligations
Ensuring service security and fraud prevention
Statistical analyses and service development activities
Marketing and communication activities with your consent

5. Legal Basis for Data Processing

Your personal data is processed based on the following legal grounds under KVKK Art. 5 and GDPR Art. 6:

Performance of contract: Data processing activities necessary for the performance of our service agreement
Legal obligation: Our tax, accounting, and legal reporting obligations
Legitimate interest: Service security, fraud prevention, and service improvement
Explicit consent: Marketing communications and optional cookie usage

6. Data Transfer

Your personal data may be shared with third parties in the following situations:

Service providers: Cloud infrastructure (AWS, Google Cloud), payment processing (Stripe, iyzico), email services
Legal requirements: Court orders, prosecution requests, or as required by legal regulations
Business partners: Our integration partners, with your explicit consent

In case of data transfer abroad, the necessary safeguards are provided under KVKK Art. 9. Transfers are made to countries with standard contractual clauses and/or adequacy decisions.

7. Data Security

The following technical and administrative measures are applied for the security of your personal data:

TLS 1.2+ encryption during transfer
AES-256 encryption for data at rest
Regular security audits and penetration tests
Access controls and authorization mechanisms
Employee training programs and confidentiality agreements
Incident response and breach notification procedures

8. Data Retention Periods

Your personal data is retained for the duration required by processing purposes and within the scope of legal retention obligations:

Account data: Until account deletion + 1 year
Conversation data: 2 years (customizable within the plan)
Payment records: 10 years as required by law
Log records: 1 year
Marketing data: Until consent is withdrawn

9. Your Rights

You have the following rights under KVKK Art. 11 and GDPR Art. 15-22:

Learning whether your personal data is being processed
Requesting information about your processed data
Learning the purpose of processing and whether data is used in accordance with its purpose
Requesting correction of data
Requesting deletion or destruction of data
Requesting notification to third parties to whom data has been transferred
Objecting to a result against you arising from the analysis of processed data exclusively through automated systems
Right to data portability (under GDPR)

To exercise these rights, you can use the KVKK email channel or the contact channels below.

10. Changes

This Privacy Policy may be updated in line with legal regulations and service changes. In case of significant changes, notification will be made via email. The current version will always be published on this page.

11. Contact

For your questions and requests about our privacy policy:

Email: [email protected]
Address: Ziya Gökalp Mah. Muhsin Ertuğrul Cad. No: 3, Başakşehir / İstanbul
Phone: 0850 302 85 84