Within the scope of Turkish Personal Data Protection Law No. 6698 ("KVKK"), we would like to inform you regarding the processing of your personal data in accordance with our disclosure obligation.

1. Identity of the Data Controller

The data controller for your personal data is:

2. Purpose of Personal Data Processing

Your personal data is processed within the scope of personal data processing conditions specified in Articles 5 and 6 of KVKK for the following purposes:

2.1. Service Provision

• Providing financial management platform services
• Creating and managing user accounts
• Processing subscription transactions
• Enabling use of platform features

2.2. Communication

• Sending service-related notifications
• Responding to support requests
• Sending security alerts
• Delivering invoice and payment notifications

2.3. Security

• Ensuring account security
• Preventing unauthorized access
• Fraud detection and prevention
• Protecting system security

2.4. Legal Obligations

• Tax compliance
• Commercial law obligations
• Providing information to authorized institutions
• Conducting legal processes

3. Categories of Personal Data Processed

4. Your Rights

Under Article 11 of KVKK, you have the following rights:

• Right to learn whether your personal data is processed
• Right to request information if processed
• Right to learn the purpose of processing and whether it is used accordingly
• Right to know third parties to whom data is transferred domestically or abroad
• Right to request correction if processed incompletely or incorrectly
• Right to request deletion or destruction under Article 7 of KVKK
• Right to request notification of correction/deletion to third parties
• Right to object to adverse results arising from analysis by automated systems
• Right to claim compensation for damages caused by unlawful processing

5. Application Method

To exercise your rights, you may apply through the following channels:

Response Time: Your application will be concluded within 30 days at the latest.

6. Complaint to Personal Data Protection Authority

If your application is rejected, the response is found insufficient, or no response is given within the deadline, you may file a complaint with the Personal Data Protection Authority within 30 days from learning of the response, and in any case within 60 days from the application date.