Privacy Policy
What personal data we collect, why we process it, who it reaches, and the rights you hold over it.
Last updated: 24.06.2026
01Information We Collect
We collect information you provide directly to us, information we collect automatically when you use our services, and information from third-party sources.
02Types of Data We Collect
We may collect the following types of personal data:
Identity and contact information (first name, last name, e-mail, phone number, address)
Information relating to the organization you represent and its organizational structure
Technical data (IP address, session and log records, device information)
Usage data and analytics
Location data (country, city, district)
Documents, invoices, sustainability/carbon data you upload to the platform and the content you direct to the artificial intelligence features
03How We Use Your Information
We use the information we collect to provide, maintain, and improve our services, process transactions, send communications, and comply with legal obligations.
04Information Sharing
We do not sell, rent or transfer your personal data to third parties for marketing purposes without your consent. Your data is transferred only to the sub-processors with whom we cooperate for the provision of the service (e-mail, SMS, cloud storage, security and infrastructure services), to authorized public institutions, and where required by law, limited to the relevant purpose. Your data processed in our artificial intelligence powered features is not transferred to any third-party artificial intelligence service.
05Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
06Your Rights
Under Turkish Law No. 6698 (KVKK), the GDPR and other applicable laws, you have certain rights regarding your personal data. For the full list of your rights under the KVKK, please review the KVKK Notice:
Right to access your personal data
Right to rectify inaccurate data
Right to erasure ('right to be forgotten')
Right to restrict processing
Right to data portability
Right to object to processing
07Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.
08International Transfers
Since the servers of some infrastructure and service providers used are located abroad, your personal data may be transferred abroad and processed there. In such transfers, it is essential that appropriate safeguards for the protection of your data are ensured in accordance with Article 9 of the KVKK and the relevant legislation.
09Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the 'Last updated' date.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: