KVKK Notice (Personal Data Protection)

This page is an English-language summary of our disclosure notice under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), prepared to inform users of Sözleşmeler (sözlesmeler.com.tr). It is provided for information only — the Turkish-language KVKK Aydınlatma Metni remains the legally authoritative version. For more technical detail, see our Privacy Policy and Cookie Policy pages as well.

1. Data controller

Data controller: ECLABS YAZILIM — Şeyma Karaş (sole proprietorship registered in the Turkish craftsmen register). Address: Bahçelievler Mah. Şehit Ahmet Akyol Sk. No: 31, İç Kapı No: 1, Serdivan/Sakarya. Tax office: Gümrükönü. "Sözleşmeler" is a brand of this business. Contact: iletisim@sözlesmeler.com.tr. Website: sözlesmeler.com.tr.

2. Categories of personal data processed

• Document form data: name, address, ID/tax number, contract details, etc. — processed only in your browser; never sent to or stored on our server.
• CV builder: the information you type into your CV is saved only in your browser's local storage (localStorage) so you do not lose your work; it is never sent to our server. It stays on your device until you use “Clear form” in the CV builder or clear your browser data. On a shared device, we recommend deleting it when you are done.
• AI ad creative tool (only with your consent): low-resolution copies of the screenshot and images you upload, app name and description — sent to Google Gemini for analysis; not stored permanently on our server.
• Contact / feedback: the message you write and any optional contact details — processed to handle your request.
• Technical logs: IP address, browser type, request time — standard access logs kept by our hosting provider.
• Anonymous tool statistics: tool name, event type, success status — contain no personal content or files.
• Security: Turnstile verification; a non-reversible rate-limit key derived from your IP address (the raw IP is never written to the message record).

3. Purposes of processing and legal grounds

• Running document and file tools client-side — performance of the service (KVKK Art. 5/2-c).
• AI ad creative analysis and the related transfer to Google Gemini (USA) — explicit consent obtained before use (KVKK Art. 5/1, Art. 9).
• Responding to support requests — legitimate interest and, where applicable, explicit consent / performance of a contract (form submission).
• Security, abuse prevention and system integrity — legitimate interest (KVKK Art. 5/2-f).
• Fulfilling legal obligations — under applicable legislation.

4. Retention periods

• Document form data: never stored on the server; lost when the page is closed.
• CV builder draft: only in your browser's localStorage, until you delete it with “Clear form” or clear your browser data; never stored on the server.
• Contact and feedback messages: 365 days (D1 database). This period is not set by law; it is set by the ECLABS internal retention policy so that support requests can be answered and followed up. Expired records are deleted periodically.
• Contact form rate-limit key (derived from your IP address, non-reversible): 30 days from last use (ECLABS internal retention policy; to prevent abuse). Expired records are deleted periodically.
• AI ad creative: images are not stored; the analysis result (no images) is cached for up to 6 hours.
• Access logs: according to our hosting provider's policy.
• Background-removal daily counter: only the day and operation count, kept in browser localStorage.
• Your applications under KVKK Art. 11 and our responses to them: 3 years from the conclusion of the application (ECLABS internal retention policy; to be able to prove that the application was answered properly).

A request for the deletion of your personal data is concluded within 30 days at the latest (KVKK Art. 13/2; Regulation on the Deletion, Destruction or Anonymisation of Personal Data, Art. 12).

5. Data transfers

Document and image content is never sent to our server or to third-party processing services. Exception: if you use “Analyze with AI” in the AI ad creative tool and give explicit consent, images and texts are transferred to Google LLC's Gemini API (USA) for analysis (KVKK Art. 9). Without consent the tool works in manual mode and sends nothing. Resend may be used for admin notifications from the contact form, and Cloudflare Turnstile for bot protection. The Google AdSense script is not currently loaded; if ad display is enabled in the future, the script will be loaded only if you give explicit consent to advertising cookies, in which case data is transferred to Google LLC (USA) (KVKK Art. 9) — see the Cookie Policy for the current status.

6. Your rights (KVKK Art. 11)

You have the right to:

• Learn whether your personal data is being processed
• Request information about it, if it has been processed
• Learn the purpose of processing and whether it is used in line with that purpose
• Know the third parties to whom it has been transferred
• Request its correction if it has been processed incompletely or inaccurately, and request its deletion or destruction
• Request that these operations be notified to the third parties to whom it has been transferred
• Object to a result against you arising from analysis exclusively by automated systems
• Claim compensation if you suffer damage due to unlawful processing

How to apply. You can submit your requests under KVKK Art. 11 to the data controller, ECLABS YAZILIM — Şeyma Karaş, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, through one of the following channels:

• from the e-mail address you have previously notified to us and that is registered in our system, to iletisim@sözlesmeler.com.tr;
• signed with a secure electronic signature or mobile signature, to iletisim@sözlesmeler.com.tr;
• with a wet-signed petition, in person, by post or through a notary, to Bahçelievler Mah. Şehit Ahmet Akyol Sk. No: 31, İç Kapı No: 1, Serdivan/Sakarya.

Your application must include your name and surname (and your signature, for written applications); your Turkish ID number if you are a Turkish citizen, or your nationality and passport or ID number if you are a foreign national; your residential or business address for notification; your e-mail address and telephone number, if any; and the subject of your request. You may attach documents relating to your request to your application. We use this information only to verify your identity and to conclude your application.

Your application is concluded free of charge as soon as possible, depending on the nature of the request, and within 30 days at the latest. We either accept your request or reject it with reasons, and send our response in writing or electronically. If a written response exceeds 10 pages, a fee of TRY 1 may be charged for each additional page; if the response is provided on a recording medium such as a CD or flash drive, a fee not exceeding the cost of the medium may be charged. If the application resulted from our error, the fee charged is refunded.

If your application is rejected, you find our response insufficient, or no response is given in time, you may lodge a complaint with the Personal Data Protection Board within 30 days from the date you learn of the response and, in any case, within 60 days from the date of application (KVKK Art. 14).

7. Changes

This notice may be updated. The current version is always published on this page, and the Turkish original at /kvkk remains the authoritative text.