This English text is provided for information purposes only; the legally binding version is the Turkish text.
Version: v1-2026-07-02
Under Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data is processed by Expertnexus Teknoloji ve Danışmanlık Ltd. Şti., in its capacity as data controller, within the scope described below.
In the course of providing the service, we process: identity and contact information (full name, username, email), account and authorization information (role, department, level), transaction-security information (login records, audit logs, IP/session data), the business data you upload to the platform, and notification/report delivery records.
Your personal data is processed for membership and account management, provision of the business-intelligence service, authorization and access control, ensuring information security and auditing, billing/licensing, delivering the reports and notifications you request, and fulfilling legal obligations.
Under Article 5 of the KVKK, your data is processed on the grounds of the establishment/performance of a contract, the data controller’s legal obligation, the establishment/exercise/protection of a right, and legitimate interest; where explicit consent is required, it is processed based on your explicit consent.
Your account and platform data are retained throughout the service relationship; message/report delivery records for 12 months, security audit logs for 24 months, alarm history for 12 months, and incomplete-payment and rejected-application records for 90 days. When these periods expire, the data is deleted or anonymized. When the service relationship ends, the data belonging to your account is permanently deleted, subject to statutory retention obligations.
The platform is hosted on Google Cloud infrastructure (European Union / Belgium region); accordingly, your data may be stored on servers located abroad. Data is processed only to the extent necessary to provide the service and with security measures compliant with the applicable legislation; it is not shared with third parties for marketing purposes.
You have the right to learn whether your personal data is being processed, request information, learn the purpose of processing, request correction if processed incompletely/incorrectly, request erasure/destruction when the conditions are met, object to the processing, and request compensation for damages. You may submit your requests to the data controller through the contact channels above.
Note: Security is a continuously improving process; for your questions and data requests, you can reach us through the contact channels above.