Privacy Policy
This policy explains what personal data OKTAVE SOFTWARE processes through this website, why, and what rights you have under KVKK (Turkish Law No. 6698) and the GDPR.
Data controller
OKTAVE SOFTWARE ("OKTAVE") is the data controller for personal data processed through this website. OKTAVE SOFTWARE is operated by Yakup Demiryürek as a sole proprietorship in Türkiye. Address and registry details are shared on request via info@oktavesoftware.com.
Data we collect
Quote requests: name, email address, and the project details you provide. Accounts: email address, name, optional company, and language preference, via email sign-in link or Google sign-in — we never store passwords. Messages you exchange with us through the portal.
Security metadata on form submissions
When you submit the quote form, we record your IP address, browser user-agent, and approximate location (country/city) for security and abuse prevention. This data is retained for a maximum of 12 months, after which it is deleted or anonymized.
Why we process it
To respond to your quote request, provide the client portal, communicate about your project, and keep the service secure and free of abuse.
Legal bases
Performance of a contract or pre-contractual steps (quotes, projects); your consent (account creation); and our legitimate interest in keeping the service secure (security metadata).
Recipients & processors
We use these processors: Supabase (database, authentication, file storage), Vercel (hosting/CDN), Resend (email — notifications and sign-in links), Cloudflare (Turnstile bot verification), and Google (OAuth sign-in). Each processes data only to provide its part of the service.
International transfers
Some processors are located outside Türkiye/the EEA/UK. Transfers rely on an appropriate safeguard (Standard Contractual Clauses, an adequacy decision, or binding corporate rules). Under KVKK (post–Law 7499), consent alone is no longer a sufficient transfer basis. Each processor’s service terms include a data processing agreement (DPA) incorporating the EU Standard Contractual Clauses; on the KVKK side, transfers rely on the standard-contract mechanism published by the Turkish Data Protection Board.
Retention
Security metadata: maximum 12 months. Account data: until you delete your account. Quote and project records: as long as required for business and legal record-keeping — commercial books and records for 10 years (Turkish Commercial Code art. 82), tax-relevant records for 5 years (Tax Procedure Law art. 253).
Your rights
Under KVKK Article 11 and the GDPR you may request access, correction, deletion, and object to processing. You can delete your account and its data yourself from the portal profile page, or contact us at any time.
Contact
For any privacy request: info@oktavesoftware.com