This document is an English translation provided for informational purposes only. The legally binding version is the Turkish original, as required by Turkish law. In case of any discrepancy, the Turkish text prevails.
This disclosure has been prepared pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data ("KVKK") to inform you about the processing of your personal data.
1. Data Controller
Your personal data is processed by Web Engine Dijital (trading as WpAsis) in its capacity as data controller, for the purposes described below.
2. Purposes of Processing
Your personal data is processed for the following purposes:
- Membership operations and account management.
- Service delivery (AI-powered WhatsApp assistant).
- Conducting information security processes.
- Fulfilling legal obligations.
- Subscription and payment management.
- Responding to customer support requests.
3. Personal Data Processed
- Identity data: first name, last name, email, phone number.
- Security data: IP address, device fingerprint (hash), login timestamps.
- Transaction data: WhatsApp message metadata (timestamps, sender/receiver identifiers, delivery status). Message content is not retained.
4. Recipients of Data
Your personal data may be shared with the following third parties:
- Payments: Stripe — your payment details are processed through a secure payment infrastructure.
- AI service provider: OpenAI — your messages are processed to generate AI responses. Message content is not retained by OpenAI or WpAsis.
- Legal obligations: competent public authorities as required by applicable law.
5. Retention Period
- Account data: retained until you request deletion.
- System logs: retained for 90 days, then automatically deleted.
- Legal obligations: retained for the period prescribed by applicable law.
6. Your Rights under KVKK Article 11
Under Article 11 of the KVKK, you have the following rights:
- Learn whether your personal data is processed.
- Request information if your personal data has been processed.
- Learn the purpose of processing and whether it is used in accordance with that purpose.
- Know the third parties to whom your personal data is transferred domestically or abroad.
- Request correction if your personal data is incomplete or inaccurate.
- Request deletion or destruction under Article 7 of the KVKK.
- Request that correction or deletion operations be notified to third parties.
- Object to outcomes adverse to you arising from automated analysis.
- Request compensation if you suffer damage due to unlawful processing.
7. Applications
You may submit requests regarding the above rights in writing to [email protected]. Applications are finalized within 30 days at the latest.