Privacy Policy & KVKK Notice
Last updated October 8, 2026
This policy explains how TrackASO (operated by its registered owner) (“we”), as data controller, processes personal data when you use TrackASO. It serves as our information notice (aydınlatma metni) under Türkiye’s Personal Data Protection Law No. 6698 (KVKK) and our notice under the EU/UK GDPR.
Data we process
- Account: email address and sign-in records.
- Usage content: apps, keywords, tags and the rankings we record for them.
- Security logs: IP address, browser user agent and timestamps of sign-ins and requests.
- Billing status: plan, subscription status and customer id from our payment provider. Card details are handled by Paddle.com; we never receive them.
Purposes and legal bases
- Providing the Service and your subscription — performance of a contract (KVKK art. 5/2-c; GDPR art. 6(1)(b)).
- Security, abuse prevention and fixing errors — legitimate interests (KVKK art. 5/2-f; GDPR art. 6(1)(f)).
- Tax and accounting records — legal obligation (KVKK art. 5/2-ç; GDPR art. 6(1)(c)).
- Product emails beyond service messages only with your consent, which you can withdraw anytime.
Processors and international transfers
- Cloudflare, Inc. — hosting, database, security (global network).
- Paddle.com — payments and invoicing, as Merchant of Record.
- Resend, Inc. — delivery of sign-in emails.
These providers may process data outside Türkiye, including in the United States and the EU. Transfers rely on the safeguards available under KVKK article 9 (including standard contractual clauses notified to the KVKK Authority where required) and GDPR chapter V.
Retention
Account and usage data are kept while your account exists and deleted when you delete the account (Settings → Account). Security logs are kept up to 90 days. Billing records are kept for the periods required by tax law (up to 10 years in Türkiye).
Your rights
Under KVKK article 11 and the GDPR you may ask whether we process your data, obtain a copy, request correction or deletion, object to processing, request restriction or portability, and learn about transfers and recipients. You can delete your account and all its data yourself in Settings. For other requests write to legal@trackaso.app; we answer within 30 days. You may also complain to the KVKK Authority (Kişisel Verileri Koruma Kurumu) or your local data protection authority.
Cookies
We use one strictly necessary cookie to keep you signed in. We use no advertising or cross-site tracking cookies, so no cookie banner is needed.
Children
The Service is not intended for anyone under 18.
Contact
TrackASO (operated by its registered owner), Türkiye — legal@trackaso.app