Privacy Policy
How your personal data is collected, processed and protected.
Last updated: 8 September 2026
Gizlilik Politikası’nı Türkçe okuyunContents
1. Data Controller
Dezy Yazılım Ltd. Şti. ("Dezy", "we", "us") acts as the data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK").
2. Personal Data We Collect
To provide our services we collect the following personal data:
Identity data:
• First name, last name
• National ID number (optional)
• Tax number (for businesses)
Contact data:
• Email address
• Phone number
• Business address
Account data:
• Username and password (encrypted)
• Profile photo (optional)
• Preferences and settings
Transaction data:
• Sales records
• Customer information (your own customers)
• Inventory data
• Financial reports
Technical data:
• IP address
• Device information
• Browser type
• Session durations
3. Purposes of Processing
Your personal data is processed for the following purposes:
Providing the service:
• Delivering the software services
• Creating and managing user accounts
• Providing technical support
• Service updates and improvements
Legal obligations:
• Compliance with tax legislation
• Responding to legal requests
• Meeting audit requirements
Communication:
• Sending service notifications
• Responding to support requests
• Informing you about important updates
Security:
• Securing accounts
• Fraud prevention
• Monitoring system security
4. Data Security
The security of your data is our highest priority:
Technical measures:
• 256-bit SSL/TLS encryption
• AES-256 data encryption
• Secure server infrastructure (based in Türkiye)
• Regular security updates
• Penetration testing
Organisational measures:
• Access control and authorisation
• Employee confidentiality agreements
• Regular security training
• Incident response procedures
Backups:
• Daily automated backups
• Geographically distributed backups
• Encrypted backup files
6. Your Rights under KVKK
Under Article 11 of Law No. 6698 you have the right to:
- Learn whether your personal data is processed - Request information if it has been processed - Learn the purpose of processing and whether the data is used accordingly - Know the third parties to whom the data is transferred, in Türkiye or abroad - Request rectification if the data is incomplete or incorrect - Request erasure under the conditions set out in Article 7 of the Law - Request that rectification and erasure be notified to third parties to whom the data was transferred - Object to a result against you arising from analysis carried out solely by automated systems - Claim compensation for damage arising from unlawful processing
How to apply: to exercise your rights, write to [email protected].
8. Data Retention
Your personal data is retained as follows:
Active accounts:
• For as long as your account is active
After account deletion:
• Personal details (name, email, phone, password, account links): deleted at the moment of deletion
• Commercial records (sales receipts, cash movements, ledger entries): retained for 10 years as required by law, in anonymised form
• Backups: deleted on a rolling basis within 90 days
Deletion requests:
You can delete your account yourself in the app: Settings → MY ACCOUNT → "Delete my account". A step-by-step guide and the full list of what is deleted and what is retained is available at dezyapp.com/hesap-sil. You may also write to [email protected].
9. Changes to this Policy
This privacy policy may be updated from time to time. When significant changes are made:
- You will be informed by email - You will receive an in-app notification - The updated date will be shown on this page
Continuing to use our services means you accept the updated policy.
Language: this English text is provided for convenience. In case of any discrepancy, the Turkish version at dezyapp.com/privacy prevails.