1. Data Controller
Masufy ("we", "us", "the platform") is the data controller for this website and the services provided through app.masufy.com, under Turkey's Law No. 6698 on the Protection of Personal Data ("KVKK").
2. Scope of This Policy
This policy covers visitors to masufy.com and business owners who open a store on Masufy ("Merchants"). A Merchant's own data-processing activities toward their customers are governed by the separate privacy policy each Merchant publishes on their own storefront — Masufy acts as a data processor in that relationship, not a data controller.
3. Information We Collect
- Account information: full name, email address, phone number (and, if you sign in with Google, the name, email, and profile photo from your Google account)
- Business information: store name, tax/business details, contact address
- Usage data: on-site navigation, cookies, IP address, browser information
- Communication data: support requests and messages you send us
4. Why We Process Your Data
To create and manage your account, run your store, process payments and billing, meet legal obligations, analyze and improve service quality, and maintain security.
5. Third Parties We Share Data With
To operate the service, we share limited, purpose-specific data with the following subprocessors: hosting and database infrastructure (Supabase, Vercel), payment infrastructure (iyzico), email delivery (Resend), shipping integrations, and web analytics (Google Analytics, Meta Pixel). Data is shared with these parties solely to deliver the service.
6. Cookies
Our site uses essential, performance, and preference cookies. See our Cookie Policy for details.
7. Data Retention
Your personal data is retained for as long as your account is active and as required by our legal retention obligations; it is deleted or anonymized within the periods required by applicable law once your account is closed.
8. Your Rights Under KVKK
Under Article 11 of the KVKK, you have the right to: learn whether your data is being processed; request information about it; learn the purpose of processing; know the third parties your data is transferred to, domestically or abroad; request correction of incomplete or inaccurate data; and request deletion or destruction of your data.
9. Contact
To exercise your rights or ask a question: [email protected]
10. Changes
This policy may be updated from time to time; the current version is always published on this page.