Privacy Policy

1. Data Controller

In accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by AECKraft as the data controller within the scope explained below.

• Company Name: AECKraft Software
• Address: Alfa and Beta Buildings, Doğuş Street No: 207/Z, DEU Main Campus B, Dokuz Eylül University, 35000 İzmir
• Email: info@aeckraft.com
• Phone: +90 536 839 30 85

2. Purposes of Processing Personal Data

Your personal data is processed in compliance with Articles 5 and 6 of KVKK for the following purposes:

• Managing platform membership and account operations
• Providing, improving, and personalizing services
• Customer relationship management and support services
• Billing, payment, and accounting operations
• Responding to communication requests and informational activities
• Fulfilling legal obligations
• Ensuring platform security and preventing fraud
• Statistical analysis and reporting
• Marketing activities (with explicit consent)

3. Categories of Personal Data Processed

• Identity Information: Name, surname, username
• Contact Information: Email address, phone number, address
• Account Information: Password (hashed), membership date, plan information
• Transaction Security: IP address, session information, login logs
• Financial Information: Billing address, payment history (card details are not stored)
• Usage Data: Platform usage statistics, preferences
• Project Data: Project and customer data uploaded by users to the platform

4. Transfer of Personal Data

Your personal data may be shared with the following parties in compliance with Articles 8 and 9 of KVKK:

• Authorized public institutions and organizations within the scope of legal obligations
• Business partners providing service infrastructure (hosting, email, payment infrastructure)
• Audit and consultancy firms

In case of data transfer abroad, necessary measures are taken under Article 9 of KVKK and your explicit consent is requested.

5. Data Retention Periods

Your personal data is retained for the duration required by the processing purposes and the statute of limitations prescribed by relevant legislation:

• Account information: Duration of active account + 1 year after account deletion
• Financial records: 10 years as required by law
• Communication records: 3 years
• Log records: 2 years under Law No. 5651
• Marketing consents: Until consent is withdrawn

6. Data Security Measures

The following technical and administrative measures are taken to ensure the security of your personal data:

• Data transmission security with SSL/TLS encryption
• Passwords stored hashed with bcrypt/argon2 algorithms
• Regular security tests and vulnerability scans
• Access control and authorization mechanisms
• Data backup and disaster recovery procedures
• Data security training for employees
• Maintaining a data processing inventory

7. Rights of the Data Subject (KVKK Article 11)

Under Article 11 of KVKK, you have the following rights:

• Learning whether your personal data is being processed
• Requesting information about the processing of your personal data
• Learning the purpose of processing your personal data and whether it is used appropriately
• Knowing the third parties to whom your personal data has been transferred domestically or abroad
• Requesting correction of your personal data if it has been processed incompletely or incorrectly
• Requesting deletion or destruction of your personal data under the conditions set forth in Article 7 of KVKK
• Requesting notification of correction and deletion operations to third parties to whom your personal data has been transferred
• Objecting to any result against you arising from the analysis of processed data exclusively through automated systems
• Claiming compensation for damages incurred due to unlawful processing of your personal data

To exercise your rights, you can contact us at info@aeckraft.com.

8. Cookie Policy

The following types of cookies are used on our website:

Essential Cookies

Cookies required for the proper functioning of the website. Used for session management and security settings. These cookies cannot be disabled.

Performance Cookies

Cookies that collect anonymous information about how visitors use the website. Used to improve website performance.

Functional Cookies

Cookies that remember user preferences such as language and theme selection. Used to provide a personalized experience.

Analytics Cookies

Cookies that collect data such as visitor statistics, page views, and traffic sources. Third-party analytics tools such as Google Analytics may be used.

You can manage or disable cookies through your browser settings. However, disabling cookies may cause some features of the website to not function properly.

9. Contact

For questions about our privacy policy or the processing of your personal data, you can reach us: