Privacy and KVKK Notice

Faleo Privacy and KVKK Notice

Controller: Nintu turizm seyahat emlak inşaat ticaret limited şirketi. Contact: nintuturizm@gmail.com. The controller's official contact details are shown alongside this notice. This is an information notice, not a contract or a request for blanket consent.

We collect account and authentication details; company, representative, address and tax details; order, payment reference, credit usage and document acknowledgement records; project briefs, media, presentation responses and technical approval records; and information submitted for demos or support. Session, security and presentation approval flows may record IP addresses and timestamps. Data is collected electronically through forms, uploads, application use and correspondence. Bank login credentials are never requested; the bank-transfer flow does not collect card details.

Account, ordering, payment verification, project delivery and support processing relies on establishing or performing the contract. Fiscal records and lawful authority requests rely on legal obligations. Dispute and acceptance records may be needed to establish, exercise or protect rights. Proportionate security and abuse prevention relies on legitimate interests, with individual rights considered. These are grounds under KVKK Article 5(2); necessary service processing is not made dependent on general consent. Demo requests are used to arrange and respond to the request, not to subscribe the requester to marketing. Optional marketing permissions, where required, are separate.

For client CRM data and responses from the client's own customers, the client is the controller and Faleo acts as a processor within the service. Clients must fulfil their own obligations and upload only data they are entitled to use. Do not upload unnecessary sensitive information or identity documents. Signature images document technical approvals; the feature is not presented as biometric identity authentication.

Infrastructure providers include Supabase (authentication/database), Vercel (web hosting), Railway (jobs/rendering), Cloudinary (media) and Anthropic/Claude (AI generation from submitted briefs). Necessary information may also be shared with banks, enabled payment providers, communication providers, accountants, legal advisers and legally authorised bodies. Content shared via a presentation link becomes accessible to recipients of that link. Payment provider details are shown before card payment where that method is enabled.

Infrastructure and AI services can involve processing outside Turkey. The applicable conditions and safeguards under KVKK Article 9 must be addressed separately. Reading this notice or accepting the service contract is not blanket consent to international transfers. Contact us for information about transfer scope and mechanisms. This page alone is not evidence that a required transfer arrangement with a provider has been executed.

Data is retained for service delivery and applicable legal obligations. Sales, invoices, payments, acceptance and dispute records can require retention after account closure. Demo and support data is limited to the purpose and necessary follow-up. The 90-day expiry of project credits is not an automatic personal-data deletion period. Data with no remaining processing ground is subject to applicable deletion, destruction or anonymisation processes. Requests are considered according to the data type and applicable obligations.

Session and language-preference cookies support application operation. This notice does not request permission for advertising cookies; any such future use requires its own information and choice mechanism where applicable. Access is limited by user and company permissions. Do not send your password to support.

Under KVKK Article 11 you can request information on processing, its purpose and recipients, correction, deletion or destruction where conditions apply, notification of relevant recipients, object to adverse outcomes arising exclusively from automated analysis, and seek compensation for unlawful processing. Apply through the statutory channels to the controller's official address or from your registered email to nintuturizm@gmail.com. Proportionate identity verification may be required. Requests are considered within statutory periods.

The notice version is displayed. Checkout stores the notice presented and your acknowledgement alongside the order; this is not consent. A later notice is not retrospectively recorded as accepted for an earlier order. Turkish legal terms are provided for the Turkish commercial service.