Personal Data Protection Disclosure (KVKK)

1. Data controller

This disclosure is made by not yet provided, registered at not yet provided, MERSIS number not yet provided, as data controller under Law No. 6698 on the Protection of Personal Data (the "Law").

2. Personal data we process

Identity and contact data: the name and e-mail address you give when creating an account, and the business contact details you choose to enter in your workspace.

Transaction security data: network address, browser identifier and session records while you use the service, and the same data at the moment you accept a legal text.

Customer transaction data: the plan you subscribe to and the payment confirmations returned by the payment service provider. Card details are entered on the provider's systems and are not processed by us.

Visual data: the images you upload to your menu.

Marketing data: your commercial electronic message preference, only if you give it.

Guest data: pseudonymous visit, order and rating events on published menus, keyed by a daily-rotating visitor key that does not identify a person.

3. Purposes of processing

Performing the service contract: creating and running your workspace, publishing your menu, serving it to guests, sending verification, invitation and notification e-mails.

Keeping accounts and the service secure, detecting and preventing abuse.

Meeting our legal obligations, including commercial and tax record-keeping and proving that consent was given.

Sending commercial electronic messages and loading measurement tools, in each case only with your explicit consent.

4. Method and legal basis of collection

Personal data is collected electronically through the registration form, the workspace screens, the published menu pages, the contact form and the payment step.

The legal bases are those in Article 5 of the Law: processing necessary for the performance of a contract to which you are a party (Article 5/2-c); compliance with a legal obligation (Article 5/2-ç); processing necessary for our legitimate interests provided it does not harm your fundamental rights and freedoms (Article 5/2-f); and, for commercial messages and measurement tools, your explicit consent (Article 5/1).

5. To whom and why data is transferred

Data is transferred to processors acting on our instructions, to the extent needed for the purposes above: the e-mail delivery provider (Mailgun) for e-mails we send you; the payment service provider (Iyzico) for payments; the AI provider configured for the service, where you use an AI-assisted feature, for the menu text or images you submit; and measurement tools loaded through Google Tag Manager after your consent.

Where a provider operates its systems outside Turkey, the transfer abroad is made on the conditions set by Article 9 of the Law. Data is disclosed to public authorities only where the law requires it.

The servers on which the service runs are themselves located outside Turkey, at a hosting provider in Germany. This means the data described above is stored abroad continuously, not only when a provider is involved, and the transfer abroad is made on the conditions set by Article 9 of the Law.

Backup copies are kept on the same servers. A backup is therefore stored in the same country and under the same conditions as the live data.

6. Retention

Account and workspace data are kept while the account exists, and afterwards only for as long as the law requires. Consent records are kept for as long as we must be able to prove consent. Pseudonymous guest events are not linked to a person and are kept for operating and improving the service.

When the owner of a workspace asks for its data to be erased, the request is carried out after a grace period, and the workspace settings show the exact date. Until that date the request can be taken back and nothing is removed.

Records we must keep by law are not removed by such a request. These are the invoices issued to the workspace, the accounting entries behind them, the payment records they rest on, and the record of the consents that were given. The workspace settings name each of these and say why it is kept.

A copy of erased data can remain in backup copies for a period after the erasure, until those backups are themselves replaced.

7. Your rights under Article 11

Under Article 11 of the Law you have the right to learn whether your personal data is processed; to request information if it has been; to learn the purpose of processing and whether the data is used in line with it; to know the third parties in Turkey or abroad to whom it is transferred; to request correction of incomplete or inaccurate data; to request deletion or destruction under Article 7; to request that correction, deletion or destruction be notified to the third parties to whom the data was transferred; to object to a result that is to your detriment and was produced exclusively by automated analysis; and to claim compensation for damage caused by unlawful processing.

If you are the owner of a workspace, two of these rights can be exercised inside the product, under Settings, without writing to us: you can download everything the workspace holds as a single archive, in both a machine readable and a human readable form, and you can ask for the workspace data to be erased. Both requests, and what happened to them, are recorded in the audit trail of that same Settings screen.

For everything else, and if you do not have a workspace of your own, you can exercise these rights through the contact form on this site, by writing to not yet provided, or by e-mail to not yet provided. We answer within the period set by Article 13 of the Law.

The data in your account

You can download your menu yourself, as a CSV file, from your workspace at any time — you do not need to ask us for it. For anything else held in your account, write to us using the contact form and say what you are asking for.

Open the contact form

Where the request is sent This information has not been entered yet. A request sent through the contact form still reaches us and is recorded.