Legal

KVKK Disclosure Notice

As Atalay AI, we inform you about the processing of your personal data in our capacity as data controller under Law No. 6698 on the Protection of Personal Data (“KVKK”).

This is an informational English translation. The Turkish version of this document prevails in case of any conflict.

Last updated: July 16, 2026

01

Data controller

Under Law No. 6698 on the Protection of Personal Data (“KVKK”), the data controller is:

Unvan
ATALAY YAZILIM LTD. ŞTİ.
Adres
FULYA MAH. YEŞİLÇİMEN SK. POLAT TOWER RESIDENCE NO: 12 İÇ KAPI NO: 430 ŞİŞLİ / İSTANBUL
02

Personal data processed

The following categories of personal data may be processed in Atalay AI services:

  • Identity information: First name, last name
  • Contact information: Email address, phone number
  • Account and transaction information: Subscription, invoice, and payment references; site creation and application usage records
  • Transaction security information: IP address, session and log records, device information
  • Communication preferences: Support requests and notification preferences
03

Purposes of processing

Your personal data is processed for the following purposes:

  • Account creation, authentication, and service delivery
  • Running subscription, payment, and billing processes
  • Providing the website builder, chat, and other Atalay AI features
  • Security, fraud prevention, and protecting system integrity
  • Handling support requests and product development
  • Meeting legal obligations
  • Informational and marketing communications where you have given explicit consent
04

Legal bases

Your personal data is processed based on the legal grounds set out in Articles 5 and 6 of KVKK:

  • Necessity for the establishment or performance of a contract
  • Fulfillment of the data controller’s legal obligation
  • The data controller’s legitimate interest (provided it does not harm fundamental rights and freedoms)
  • Your explicit consent
05

Transfers

To the extent necessary to provide the service, limited data sharing may occur with hosting, authentication, payment (e.g. iyzico), notification, and analytics service providers. Your data is not sold except where required by law.

06

Retention period

Your personal data is retained for as long as required by the processing purpose and within applicable legal retention periods:

  • During the account and contractual relationship; thereafter for legal periods
  • Invoices and financial records: as required by law (typically 10 years)
  • Support and communication records: for a reasonable period
  • Session and security logs: for a limited period based on security needs
07

Your rights under KVKK

Under Article 11 of KVKK, you have the following rights:

  • To learn whether your personal data is processed
  • To request information if it has been processed
  • To learn the purpose of processing and whether it is used in line with that purpose
  • To know the third parties to whom it is transferred domestically or abroad
  • To request correction if it is incomplete or incorrectly processed
  • To request deletion or destruction under the conditions of KVKK Art. 7
  • To request that correction / deletion be notified to third parties to whom data was transferred
  • To object to a result against you arising from analysis by automated systems
  • To request compensation for damage caused by unlawful processing
08

How to apply

You may exercise your rights through the following methods:

  • Email: apply to destek@atalay.ai with information sufficient to identify you
  • Written application: to the company address via notary or registered mail with return receipt
  • Via registered electronic mail (KEP)

Applications are concluded free of charge within 30 days at the latest. If the process incurs an additional cost, a fee determined by the Personal Data Protection Board may apply. For account deletion, you may also use the /en/account-deletion page.