Privacy Policy

Last updated: 31 October 2026

1. Data controller

The data controller is appi.tr. Contact: [email protected].

2. What we collect

• Identity and contact data: name, email address, billing address.
• Order data: products purchased, amounts, invoice details.
• Payment data: processed by iyzico. We never store full card numbers; we receive only a masked card reference and the transaction result.
• Technical data: IP address, browser type, pages visited, kept in server logs for security and troubleshooting.
• Support data: messages you send us.

3. Why we use it

• To create and manage your order and deliver the product.
• To issue invoices and comply with tax and accounting obligations.
• To answer support requests.
• To keep the service secure and prevent abuse.

We do not sell personal data and we do not use it for advertising.

4. Legal bases

Performance of a contract, compliance with legal obligations (tax and e-commerce law), and our legitimate interest in keeping the service secure. Where consent is required, we ask for it explicitly.

5. Sharing

• iyzico — payment processing.
• Hosting and CDN provider — serving this website.
• Email provider — transactional and support email.
• Public authorities — where legally required.

6. Cookies

We use only cookies that are necessary for the site and the checkout flow to work. If we add analytics or marketing cookies later, this page will be updated and consent will be requested where required.

7. Retention

Order and invoice records are kept for the period required by Turkish commercial and tax law (10 years). Support messages are deleted after two years. Server logs are kept for 30 days.

8. Your rights

Under the Turkish Personal Data Protection Law (KVKK, art. 11) and, where applicable, the GDPR, you may request access, correction, deletion, restriction of processing, and portability of your data, and you may object to processing. Send requests to [email protected]. We respond within 30 days.

9. Security

The site is served over HTTPS. Access to order data is limited to people who need it. Payment card data never reaches our servers.

10. Changes

We may update this policy. The date at the top always shows the current version.