Legal

KVKK Disclosure Notice

As Atalay AI, we inform you about the processing of your personal data as data controller under Law No. 6698 on the Protection of Personal Data (“KVKK”).

This is an informational English translation. The Turkish version of this document prevails in case of any conflict.

Last updated: July 16, 2026

What this page is for

The KVKK disclosure notice explains the data controller, data categories, purposes, transfers, and your rights under Turkish Law No. 6698.

It covers personal data processed for accounts, support, billing, and publishing. Read it with the privacy policy.

For deletion requests, use the account deletion page or support email. Response methods are detailed below.

Controller name and contact details appear in the sections. State your identity details and request type (access, deletion, correction, etc.) clearly to speed handling.

This intro is informational; the scope of your rights and exceptions are set in the sections below and applicable law. The current text is always on this page.

Your rights include access, correction, deletion, objection, and other requests listed in the law. Response times and application channels are detailed in the sections below.

Data controller

Under Law No. 6698 on the Protection of Personal Data (“KVKK”), the data controller is:

This notice informs individuals who use Atalay AI web, mobile, and website builder services. Controller name, address, and contact details are below.

Legal name: ATALAY YAZILIM LTD. ŞTİ.
Address: FULYA MAH. YEŞİLÇİMEN SK. POLAT TOWER RESIDENCE NO: 12 İÇ KAPI NO: 430 ŞİŞLİ / İSTANBUL
Email: destek@atalay.ai

Personal data processed

The following categories of personal data may be processed in Atalay AI services:

Categories vary by the features you use. A free-trial user may have no payment data; purchasing a subscription may create invoice and payment references.

Identity: first name, last name
Contact: email address, phone number
Account and transaction: subscription, invoices, payment references, site creation and app usage records
Security: IP address, session and log records, device information
Communication preferences: support requests and notification preferences

Purposes of processing

Your personal data is processed for the following purposes:

Purposes are limited to providing the service and meeting legal duties. Communications that require consent are managed separately; required service emails (security, invoices, critical account notices) may be sent as part of performing the service.

Account creation, authentication, and service delivery
Running subscription, payment, and billing processes
Providing the website builder, chat, and other Atalay AI features
Security, fraud prevention, and system integrity
Handling support requests and product development
Meeting legal obligations
Informational and marketing communications where you have consented

Legal bases

Your personal data is processed based on the legal grounds in Articles 5 and 6 of KVKK:

The same data category may rely on more than one legal basis. For example, subscription data may be processed for contract performance and financial obligations.

Necessity for concluding or performing a contract
Compliance with the controller’s legal obligations
The controller’s legitimate interests (without harming fundamental rights and freedoms)
Your explicit consent

Transfers

To the extent necessary to provide the service, limited data may be shared with hosting, authentication, payment (e.g. iyzico), notification, and analytics providers. Your data is not sold except where required by law.

Where international transfers apply, appropriate safeguards under KVKK and related rules are observed. Transfers are limited to the minimum needed to deliver the service technically.

Retention period

Your personal data is retained for as long as required by the processing purpose and applicable legal retention periods:

At the end of the period, data is deleted, destroyed, or anonymized. The same principles apply to account deletion requests; records subject to legal retention may be kept for the required time.

During the account and contract relationship; then for legal periods
Invoices and financial records: as required by law (typically 10 years)
Support and communication records: a reasonable period
Session and security logs: a limited period based on security needs

Your rights under KVKK

Under Article 11 of KVKK you have the following rights:

When exercising rights, state your request clearly and share information that verifies your identity. Requests are handled as quickly as possible and within the legal deadline.

Learn whether your personal data is processed
Request information if it has been processed
Learn the purpose of processing and whether it is used accordingly
Know the third parties to whom it is transferred domestically or abroad
Request correction if incomplete or inaccurate
Request deletion or destruction under KVKK Art. 7
Request that correction/deletion be notified to third parties
Object to an adverse result from automated analysis
Claim compensation for damage caused by unlawful processing

How to apply

You may exercise your rights by:

Read this notice together with the privacy policy. If versions differ, the current provisions on the page specific to the topic prevail.

Email: apply to destek@atalay.ai with information that identifies you
Written application: to the company address via notary or registered mail
Registered electronic mail (KEP)

Applications are concluded free of charge within 30 days at the latest. If the process requires an additional cost, the fee set by the Personal Data Protection Board may apply. For account deletion you may also use the /account-deletion page.