Privacy Policy

Last updated: 28 July 2026

This English version is provided for information only. The agreement is governed by Turkish law and the Turkish text prevails in case of any discrepancy.

1. Introduction and Our Roles

At YouReply Teknoloji Ticaret Eğitim Danışmanlık Araştırma Organizasyon A.Ş. ("YouReply", "the Company", "we") we take the privacy of your personal data seriously. This Privacy Policy explains how your personal data is collected, used, stored and protected when you use the YouReply Intelligenceplatform (the "Platform").

This policy has been prepared under Turkish Personal Data Protection Law no. 6698 (KVKK) and related legislation.

Two distinct roles apply. For your account information and Platform usage data, we are the data controller. For the feedback text you upload or fetch through connectors — which may belong to your own customers — you are the data controller and we act only as a processor. It is your responsibility to ensure that such data was collected lawfully and that you have a legal basis for having it analysed.

2. Personal Data Collected

2.1 Account information

  • Name and surname
  • E-mail address
  • Phone number
  • Company/organisation name
  • Billing details

2.2 Usage data

  • IP address and browser information
  • Date and time of access
  • Pages visited and links clicked
  • Activity history on the Platform
  • Device and operating system information

2.3 Analysed content

Files you upload (CSV, Excel) and content fetched through connectors — app store reviews, support e-mails, JSON/XML records from an address you connect — are stored against your account. This content may carry personal data such as a reviewer name or e-mail address; responsibility for it rests with you, as set out in §1.

2.4 Connector credentials

Connecting a data source may require a password, application key or authorisation header. If you choose to save these, they are stored encrypted with AES-256-GCM; they are never stored as plain text and are never displayed back in the interface. If you choose not to save them, the credential stays in memory only for the duration of that fetch.

3. Purposes of Processing

  • Account creation and authentication
  • Delivering the analysis service and producing reports
  • Improving Platform services
  • Providing customer support
  • Billing and payment processing
  • Meeting legal obligations
  • Ensuring Platform security
  • Statistical analysis and reporting (anonymised data)
  • Marketing and communication (where you have consented)

4. AI Processing and International Transfer

The core function of the Platform is text analysis, performed using large language models. When you start an analysis, the text to be analysed is transferred to a third-party language model provider. The provider's servers may be located outside Türkiye; under KVKK this constitutes an international transfer, and starting an analysis means you consent to that transfer.

What you should know about this transfer:

  • Text is sent only for the analysis you start; no processing happens on its own.
  • The data sent is not used by the language model provider for model training.
  • Analysis results are written only to your account and never appear in another customer's analysis.
  • You determine what is transferred: you can mask personal data or remove columns before running an analysis.

If you do not want this flow, you should not use the Platform's analysis features — analysis is inseparable from the service.

5. Sharing of Data

Your personal data is not shared with third parties except where legally required. Limited sharing may occur in the following cases:

  • Language model providers (solely for the analysis purpose described in §4)
  • Service providers (hosting, e-mail delivery, payment processors)
  • Legal requests and court orders
  • Where you have given explicit consent

6. Protection of Data

  • Data transmission over SSL/TLS encryption
  • Connector credentials encrypted with AES-256-GCM
  • Access control and account-scoped authorisation
  • Regular security reviews
  • Backup and disaster recovery plans

7. Cookies

For details on cookie usage, please see our Cookie Policy.

8. Your Rights (under KVKK)

Under Article 11 of KVKK you have the right to:

  • Learn whether your personal data is being processed
  • Request information if it has been processed
  • Learn the purpose of processing and whether it is used accordingly
  • Know the third parties to whom it is transferred, domestically or abroad
  • Request correction if it is incomplete or inaccurate
  • Request erasure or destruction under Article 7 of KVKK
  • Object to an adverse outcome arising from analysis carried out solely by automated systems
  • Claim compensation for damages arising from unlawful processing

9. Retention Period

Your personal data is retained for as long as the purpose of processing requires and within statutory retention obligations. Deleting a data source also deletes its rows. If you close your account, your personal data is deleted or anonymised, subject to statutory retention periods.

10. Changes

We may update this policy from time to time. Changes are published on this page and you will be notified by e-mail of significant changes.

11. Contact

For questions about our privacy policy, contact us at kvkk@youreply.com.tr.

Data controller: YouReply Teknoloji Ticaret Eğitim Danışmanlık Araştırma Organizasyon A.Ş.

Address: Hacettepe Üniversitesi Teknoloji Geliştirme Bölgesi, Beytepe Kampüsü, 6. Ar-Ge Binası C Blok, Çankaya / Ankara