Privacy Policy

Last Updated: December 21, 2024

1. Introduction

This Privacy Policy explains how Ulak ("we," "us," or "our") collects, uses, and protects your personal data in accordance with the Turkish Personal Data Protection Law (KVKK - Kişisel Verilerin Korunması Kanunu) No. 6698 and other applicable data protection regulations.

2. Data Controller Information

Company Name: Ulak Contact: contact@ulak.io Address: İstanbul, Türkiye

3. Personal Data We Collect

3.1 Account Information

  • Email address
  • Name and surname
  • Password (encrypted)
  • Profile preferences

3.2 Platform Integration Data

  • Connected social media accounts (Medium, etc.)
  • Following lists from integrated platforms
  • Content preferences and newsletter settings

3.3 Usage Data

  • Login timestamps
  • IP addresses
  • Browser information
  • Device information
  • Pages visited and interaction data

3.4 Communication Data

  • Support requests
  • Email correspondence
  • Feedback and survey responses

4. Legal Basis for Processing (KVKK Article 5)

We process your personal data on the following legal grounds:

  • Explicit Consent: For processing data related to platform integrations and newsletter preferences
  • Contractual Necessity: For providing our services and maintaining your account
  • Legal Obligation: For compliance with applicable laws and regulations
  • Legitimate Interest: For improving our services, preventing fraud, and ensuring security

5. Purpose of Data Processing

We process your personal data for the following purposes:

  • Creating and managing your account
  • Providing content aggregation services
  • Sending personalized newsletters based on your preferences
  • Authenticating and authorizing access to our platform
  • Improving user experience and platform functionality
  • Communicating important updates and support
  • Complying with legal obligations
  • Preventing fraud and ensuring security

6. Data Sharing and Disclosure (KVKK Article 8 & 9)

We may share your personal data with:

6.1 Third-Party Service Providers

  • Supabase: Authentication and database services (data stored in accordance with their privacy policy)
  • Content Platforms: Medium and other platforms you choose to connect (only to fetch public content)

6.2 Legal Requirements

We may disclose your data when required by law, court order, or governmental authority.

6.3 International Data Transfers

Your data may be transferred to and processed in countries outside Turkey. We ensure appropriate safeguards are in place for such transfers as required by KVKK Article 9.

7. Your Rights Under KVKK (Article 11)

You have the following rights regarding your personal data:

  • Right to Information: Know whether your data is being processed
  • Right of Access: Request access to your personal data
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data under certain conditions
  • Right to Restriction: Request restriction of processing
  • Right to Object: Object to processing of your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Lodge a Complaint: File a complaint with the Personal Data Protection Board

To exercise these rights, please contact us at contact@ulak.io.

8. Data Retention

We retain your personal data for as long as:

  • Your account remains active
  • Required to provide our services
  • Necessary for legal compliance (minimum 10 years for commercial records as per Turkish Commercial Code)
  • Required for legitimate business purposes

After the retention period, your data will be securely deleted or anonymized.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

  • Encryption of data in transit (HTTPS/TLS)
  • Encrypted password storage
  • Regular security audits
  • Access controls and authentication
  • Secure database infrastructure (Supabase)
  • Regular backups and disaster recovery plans

10. Cookies and Tracking Technologies

We use cookies and similar technologies for:

  • Authentication (session cookies)
  • Locale preferences (language settings)
  • Security and fraud prevention
  • Analytics and performance monitoring

You can manage cookie preferences through your browser settings.

11. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes via:

  • Email notification
  • Prominent notice on our website
  • In-app notification

Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Information

For questions, concerns, or to exercise your KVKK rights, contact us:

Email: contact@ulak.io Address: İstanbul, Türkiye

You may also file a complaint with:

Personal Data Protection Board (Kişisel Verileri Koruma Kurumu) Address: Nasuh Akar Mah. Ziyabey Cad. 1407. Sok. No:4 06520 Balgat-Çankaya/Ankara Website: https://www.kvkk.gov.tr

14. Consent

By using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein.

Türkçe Versiyonu

Gizlilik Politikası - Türkçe