Türkçe

Privacy Policy

Last updated: 28 July 2026

This is a convenience translation. The Turkish version is the authoritative text and prevails in case of any discrepancy.

1. Data Controller

This notice is provided by the operator of the suyla.ai service (the "Service"), acting as data controller under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"). Contact: [email protected]

2. Personal Data We Process

a) Data of the account-holding business: name, e-mail address, business name and details, subscription and payment status. We do not store your card details; payments are processed by Stripe.

b) Data of the business's own customers:the Service processes messages arriving at your business's WhatsApp line on your behalf. This includes customer phone numbers, names, message contents and appointment records. For this data the business is the data controller and suyla.ai acts as data processor.

3. Purposes of Processing

  • Generating AI-assisted replies to WhatsApp messages and creating appointments
  • Sending appointment reminders and transactional notifications
  • Account management, billing and support
  • Security, abuse prevention and service improvement

4. Transfers and Sub-processors

Data may be transferred to the following providers so that the Service can operate:

  • DigitalOcean (server hosting — United Kingdom/London)
  • OpenAI (AI response generation — USA)
  • Stripe (payment processing)
  • Resend (e-mail delivery)
  • Cloudflare (network security and CDN)
  • Meta/WhatsApp (messaging infrastructure)
  • Google (Google Calendar synchronisation, only for businesses that connect their calendar — see section 5)

International transfers: because the providers above host data outside Türkiye, personal data is transferred abroad within the meaning of KVKK art. 9. By registering for the Service you give explicit consent to this transfer. You may withdraw consent at any time by deleting your account.

5. Google Calendar Integration and Google User Data

A business may optionally connect its Google Calendar account to the Service (Settings → Calendar). This is entirely optional; every other feature of the Service works without it.

Scopes we request and why:

  • calendar.events — to read busy time rangesfrom the business's calendar so the AI assistant never offers a slot that is already taken, and to write appointments booked through suyla.ai to that calendar as events, removing them when an appointment is cancelled.
  • userinfo.email — solely to display which Google account is connected on the settings screen, so the owner can confirm the correct account.

What we do not do: we do not use calendar data for advertising, do not sell or transfer it to third parties, and do not use it to train AI models. We do not read the contents of your events manually. From the calendar we store only start and end times and the event title; attendees, descriptions and attachments are not stored.

Limited Use disclosure:suyla.ai's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting: you can disconnect at any time from Settings → Calendar. This deletes your access and refresh tokens together with the calendar busy-time records we hold. You may also revoke access from your Google Account permissions page.

6. Retention

Data is retained for as long as your account is active. When you delete your account, all data belonging to your business and its customers is permanently deleted (Settings → Account → Delete account). Statutory retention obligations are reserved.

7. Your Rights under KVKK (art. 11)

You have the right to learn whether your data is processed, to request correction or deletion, to know the third parties to whom it has been transferred, and to claim compensation for damages. Send requests to [email protected]. You can also download or permanently delete your data from Settings → Account.

8. Cookies

The Service uses only strictly necessary cookies for session management; no advertising or tracking cookies are used.