KVKK Disclosure (Türkiye)

1. Data controller

Under Turkish Personal Data Protection Law no. 6698 ("KVKK"), the data controller is SeenRadar.

This disclosure is the English rendering of the Turkish text; in case of conflict, the Turkish version governs.

2. Personal data processed

• Account data: your name, email address and an irreversible hash of your password (the password itself is never stored). If you sign in with Google, the name and email Google passes to us.
• Session records: session identifier, IP address, browser information and the approximate location derived from your connection (country, region, city, time zone, approximate coordinates). Kept for session security and abuse detection.
• Business data: the name, website, industry, services and location of the business you want scanned — entered by you, or read from your site and shown to you for confirmation.
• Scan results: the questions put to the AI engines, the assessment of their answers, scores, detected competitors and sources, generated certificates and their history.
• Subscription and usage records: your plan, credit balance and movements, scan counters, monitoring schedule and notifications.
• Feedback you send us, together with any contact detail you include with it.

3. Purposes

• Creating your account and authenticating you.
• Running the visibility scan you requested and producing the report and certificate.
• Operating subscription, credit and invoicing processes.
• Securing the service and preventing abuse and fraud.
• Handling requests and complaints.
• Responding to legal claims and protecting our rights.

4. Legal grounds (KVKK art. 5)

• Directly related to the establishment or performance of a contract (art. 5/2-c): account, scan, subscription and credit operations.
• Compliance with a legal obligation (art. 5/2-ç): invoicing and payment records.
• Legitimate interests (art. 5/2-f): security, abuse detection, capacity and cost limits.
• Explicit consent (art. 5/1): only for processing we separately identify as consent-based.

5. Transfers, including abroad

Your data is transferred to the providers below so the service can be delivered. Their servers may be located abroad; such transfers are made under KVKK art. 9 for the performance of the service and under contractual safeguards.

• Cloudflare, Inc. — hosting, database (D1), key-value store and network security. Your data is stored on Cloudflare infrastructure.
• OpenRouter — the intermediary that puts your scan's questions to the AI engines (ChatGPT, Perplexity, Gemini). The text sent to those engines contains scan inputs such as the business name, industry and location; your account email is not sent.
• Google (PageSpeed Insights API) — technical performance measurement of the scanned website. Only the site address is sent.
• Paddle.com Market Ltd. — Merchant of Record for payments. Your payment and invoicing details are collected and processed by Paddle directly; card details never reach us.
• Google LLC — as an authentication provider, only if you choose to sign in with Google.

6. Method of collection

Data is collected electronically: entered by you through the sign-up and scan forms, received from the identity provider if you sign in with Google, and gathered automatically as you use the service (session, IP, approximate location derived from your connection).

7. Retention periods

Your account and scan data are kept while your account exists; payment and invoicing records are kept for the period required by financial regulation. Records of your acceptance (date, version, IP address) are kept separately, for the period required by law, even after account deletion, in order to defend against possible legal claims. See section 6 of the Privacy Policy for details.

8. Children's data

The service is not directed at anyone under 18, and we do not knowingly collect data from that age group. If we learn that we have obtained data belonging to someone under 18, we delete it.

9. Your rights (KVKK art. 11)

• To learn whether your personal data is processed, and to request information about it.
• To learn the purpose of processing and whether it is used accordingly.
• To know the third parties to whom it is transferred, at home or abroad.
• To request correction if it is incomplete or inaccurate.
• To request erasure or destruction where the conditions are met.
• To request that correction, erasure or destruction be notified to third parties it was transferred to.
• To object to a result against you produced solely by automated analysis.
• To claim compensation for loss suffered due to unlawful processing.

10. How to apply

Send your request to destek@seenradar.com. We conclude applications within 30 days. You can also delete your account and data yourself from the panel at any time.