PLANYUM PERSONAL DATA PROTECTION (KVKK) NOTICE

Pursuant to Law No. 6698 on the Protection of Personal Data ("KVKK"), Mehmet Cem Uysal, residing at "Marmara Mah. Avrasya Cad. - B Blok No: 17/2A Beylikdüzü / İstanbul, Turkey" and holding tax number 8990755072 (hereinafter referred to as "Planyum" or the "Company"), processes your personal data in the capacity of data controller within the purposes and limits set out below.

As a result of your membership on the Planyum platform, your use of our services, or your visit to our website, the following personal data are processed:

Identity and Contact Data: First name, last name, email address, phone number, company name, and address (for opening a membership account, performing the contract, and providing support services).

Transaction and Financial Security Data: IP address, log records, and membership plan information (to ensure system security and to fulfill obligations under Law No. 5651). Note: Credit card collection is handled by our global Merchant of Record provider, Lemon Squeezy; financial data such as credit card numbers are not stored on Planyum servers.

Marketing Data: Cookie records and usage habits (based on your explicit consent; for offering personalized campaigns and conducting retargeting activities).

Important Note (Data Processor Capacity): Special categories of personal data that Users upload to the Planyum system for their own customers (title deeds, passports, identity images, etc.) cannot be viewed or processed in any way by Planyum personnel. For such data, Planyum acts solely as "Data Processor" (hosting provider), and the data are hosted in encrypted form under high security standards on the Supabase infrastructure.

Your personal data are processed:

where directly related to the establishment and performance of the User and Service Agreement (KVKK Art. 5/2-c),

for the fulfillment of our legal obligations (KVKK Art. 5/2-ç),

for the establishment, exercise, or protection of a right (KVKK Art. 5/2-e),

and on the basis of our legitimate interests, provided that such processing does not harm your fundamental rights and freedoms (KVKK Art. 5/2-f), by automated or partially automated means. Marketing and cross-border data transfer processes rely solely on the legal basis of "Explicit Consent" (KVKK Art. 5/1).

Planyum is a cloud (SaaS) platform that operates to global software standards. In this context, your data are:

International Transfer: Transferred, based on your explicit consent, to Supabase servers located in Europe for uninterrupted system operation and database security; to Vercel and Github for code infrastructure; and to Resend for in-system notification emails.

Payment Infrastructure: Transferred to the Lemon Squeezy infrastructure for billing and collection processes.

Public Authorities: May be transferred to competent public institutions and organizations upon request where required by legal obligations.

Upon termination of your membership, your data are securely retained in a passive state for a maximum of 1 (one) year to accommodate possible return requests and in light of statutory limitation periods. At the end of that period, they are permanently destroyed.

Pursuant to Article 11 of the Law, you have the right to learn whether your personal data are being processed; to request information if they are processed; to learn the purpose of processing and whether they are used in accordance with that purpose; to request correction if incomplete/inaccurate; and to request deletion.

You may submit your requests in writing to the KEP address mehmetcem.uysal.1@hs01.kep.tr or to info@planyum.com from your registered email address.