KVKK Notice (Türkiye)

Draft version: 13 Oct 2026

This notice is provided under Article 10 of Türkiye's Personal Data Protection Law No. 6698 (KVKK) to tell you how your personal data is processed when you use StoRank. A Turkish version is available and is the authoritative text for Turkish law.

1. Data controller

The data controller is [COMPANY NAME] (address: [ADDRESS]; tax details: [TAX ID]; country: [COUNTRY]). Contact: [email protected].

2. Personal data processed and purposes

• Identity and contact: email address, account name. Purpose: creating an account, signing in, notification emails, support.
• Customer transaction: plan, trial and subscription status, usage quotas, idea name and description, the apps, keywords and competitors you track. Purpose: providing the service, reporting, invoicing.
• Transaction security: password (one-way hash only), IP address, browser and device information, approximate country, session and activity logs. Purpose: information security, preventing abuse, fixing errors.
• Store credentials: App Store Connect, Google Play Console and Apple Ads keys (encrypted). Purpose: only to read your own reports and post the review replies you approve.
• Payment: your card details do not reach us; payment is taken by Paddle as merchant of record. We receive subscription status and the limited information needed for invoicing.

3. Legal grounds

Your data is processed under KVKK Art. 5/2 because it is necessary to conclude and perform a contract (c), to meet a legal obligation (ç), for the controller's legitimate interests (f) and, where needed, with your explicit consent (a).

4. Transfers

Your data may be transferred, to provide the service, to these groups of recipients: hosting and network providers, AI providers (Anthropic, OpenAI; public store information, measurement results and the text you type are sent, your email, password and store keys are not), Paddle for payments, email delivery and error monitoring providers and, where legally required, competent authorities.

Some of these providers are abroad (for example in the United States). Transfers abroad are made with the safeguards provided in KVKK Art. 9 (for example standard contracts).

5. Collection method

Your data is collected electronically, through registration and settings forms and automatically while you use the website and app.

6. Retention

Your data is kept while your account is open. If no plan is chosen when the trial ends, or the subscription is cancelled, it is deleted after 30 days. Invoice and tax records are kept for the period the relevant legislation requires.

7. Your rights under KVKK Art. 11

By applying to the data controller you can ask to:

• learn whether your personal data is processed and request information if it is,
• learn the purpose of processing and whether it is used accordingly,
• know the third parties to whom it is transferred in Türkiye or abroad,
• have incomplete or inaccurate data corrected and have this notified to the third parties it was transferred to,
• have data deleted or destroyed when the reasons for processing no longer exist, even if it was processed lawfully, and have this notified to third parties,
• object to a result against you arising from analysis of the data exclusively by automated systems,
• claim compensation if you suffer damage because of unlawful processing.

8. How to apply

Send your requests by email to [email protected] or in writing to [ADDRESS]; we conclude the application free of charge according to its nature within 30 days at the latest. If you are not satisfied with our reply you may complain to the Personal Data Protection Board.