Privacy Policy
This policy explains what personal data OKTAVE SOFTWARE processes through this website, why, and what rights you have under KVKK (Turkish Law No. 6698) and the GDPR.
Data controller
OKTAVE SOFTWARE ("OKTAVE") is the data controller for personal data processed through this website. [PLACEHOLDER: legal entity name, address, and registry details to be completed with counsel.]
Data we collect
Quote requests: name, email address, and the project details you provide. Accounts: email address, name, optional company, and language preference, via email sign-in link or Google sign-in — we never store passwords. Messages you exchange with us through the portal.
Security metadata on form submissions
When you submit the quote form, we record your IP address, browser user-agent, and approximate location (country/city) for security and abuse prevention. This data is retained for a maximum of 12 months, after which it is deleted or anonymized.
Why we process it
To respond to your quote request, provide the client portal, communicate about your project, and keep the service secure and free of abuse.
Legal bases
Performance of a contract or pre-contractual steps (quotes, projects); your consent (account creation); and our legitimate interest in keeping the service secure (security metadata).
Recipients & processors
We use these processors: Supabase (database, authentication, file storage), Vercel (hosting/CDN), Resend (email — notifications and sign-in links), Cloudflare (Turnstile bot verification), and Google (OAuth sign-in). Each processes data only to provide its part of the service.
International transfers
Some processors are located outside Türkiye/the EEA/UK. Transfers rely on an appropriate safeguard (Standard Contractual Clauses, an adequacy decision, or binding corporate rules). Under KVKK (post–Law 7499), consent alone is no longer a sufficient transfer basis. [Mechanism per processor to be finalized with counsel.]
Retention
Security metadata: maximum 12 months. Account data: until you delete your account. Quote and project records: as long as required for business and legal record-keeping. [PLACEHOLDER: statutory retention periods to be confirmed with counsel.]
Your rights
Under KVKK Article 11 and the GDPR you may request access, correction, deletion, and object to processing. You can delete your account and its data yourself from the portal profile page, or contact us at any time.
Contact
For any privacy request: hello@oktave.software