Personal Data Notice (KVKK)

1. Data controller

UDS E-Ticaret İthalat ve İhracat Limited Şirketi (MERSIS: 0885088013400001, address: Hıdırlık Mah. 61/1 Sk. No: 9 İç Kapı No: 6, Seferihisar, İzmir, Türkiye). Contact: info@izysocial.com, registered e-mail (KEP): udseticaret@hs01.kep.tr, phone: 0536 783 97 69.

2. Data we process

• Identity and contact: name, e-mail address, optionally a phone number.
• Customer transactions: plan, billing details (company name, tax office and number, address), payment records. Card details are processed by the payment institution, not stored by us.
• Security: password hash, session logs, IP address, browser and device data, error logs.
• Service content: posts, images and videos, brand memory, calendar, notes, reports; connected social accounts' names, IDs, access tokens and statistics; incoming comments and messages.
• For client representatives using a review link: the name typed on the link and the approval or change note with its time.

3. Purposes

• Setting up membership and subscription and providing the service.
• Generating AI suggestions on request.
• Billing, payment and accounting.
• Information security, preventing abuse, fixing errors.
• Sending required service notices and answering requests.
• Meeting legal obligations.

4. Legal grounds

Article 5(2) KVKK: performance of a contract (c), legal obligation (ç), establishing or protecting a right (e) and our legitimate interests without harming your rights (f). Where none applies, we ask for your explicit consent.

5. How we collect it

Electronically, by automated or partly automated means: sign-up and payment forms, content you enter, the APIs of the social platforms and Canva you connect, and cookies.

6. Recipients

• The social platforms and Canva you connect.
• Our AI provider (Anthropic), when you use AI writing.
• Hosting, database and e-mail providers: [barındırma sağlayıcısı ve sunucu ülkesi].
• Payment institution: iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. (iyzico); yurt dışı satışlarda Paddle.com Market Ltd..
• Accountants and auditors; competent authorities where the law requires.

7. Transfers abroad

Some providers host data outside Türkiye. Such transfers follow Article 9 KVKK: with appropriate safeguards (e.g. the Board's standard contracts, notified to the Board within five business days) and, where needed, your explicit consent.

8. Retention

For as long as your account is open and for statutory periods (e.g. 10 years for commercial records); then deleted, destroyed or anonymised. Disconnecting a social account deletes its access tokens.

9. Your rights (Art. 11 KVKK)

To learn whether your data is processed and request information, learn the purpose, know the recipients in Türkiye or abroad, request correction, deletion or destruction and notification of these to recipients, object to adverse results of solely automated analysis, and claim damages for unlawful processing.

10. How to apply

In writing to Hıdırlık Mah. 61/1 Sk. No: 9 İç Kapı No: 6, Seferihisar, İzmir, Türkiye, via KEP to udseticaret@hs01.kep.tr, or from your registered e-mail to info@izysocial.com. We respond free of charge within 30 days.