Privacy Policy

Last updated: 26 May 2026 · Genix Soft · genixsoft.com.tr · KVKK Compliant

This English text is provided for convenience. The legally binding version is the Turkish original: Gizlilik Politikası.

This Privacy Policy explains which personal data is collected through the genixsoft.com.tr website and related products operated by Genix Soft (Genix Software Solutions — Cansu Aydın, Ödemiş/İzmir), how it is used, with whom it is shared and what your rights are. We act as the data controller under Law No. 6698 on the Protection of Personal Data (KVKK).

1.Data Controller

Title: Genix Soft — Cansu Aydın (Sole Proprietorship)
Address: İnönü Mahallesi, Sefa Sokak No: 7, Ödemiş / İzmir
E-mail: info@genixsoft.com.tr
Phone: 0532 174 73 88

2.Personal Data Collected

Data Category	Source	Purpose of Use
Name, e-mail, phone	Sign-up form, contact form, WhatsApp	Account creation, customer communication, support
Company name, tax/national ID number	Invoice details	Invoicing, legal obligations
Address information	Order/subscription	Billing address, service delivery
Payment information (card data only at iyzico)	Payment form	Subscription collection (card data is not stored on our servers)
IP address, browser, device information	Web visit	Security, session verification, analytics
Cookies and site usage data	Web visit	Site improvement, ad tracking
Product usage data (record count, last login)	Product subscriptions	Service delivery, subscription management

3.Purposes of Processing

Account creation and subscription management
Provision of software services (Service Tracker, Wedding Planner, Hotel PMS, etc.)
Payment collection and invoicing
Customer support and technical help (e-mail, WhatsApp)
Fulfilment of legal obligations (tax, invoice retention)
Improving service quality and the site
Marketing and advertising (Facebook, Google ads — with explicit consent)
Security and fraud prevention

4.Sharing with Third Parties

Your personal data is shared only with the service providers below, to the extent the service requires:

Service Provider	Purpose	Data Type
iyzico (Ödeme Hizmetleri A.Ş.)	Credit card payment collection	Name, e-mail, billing details, payment amount
Brevo (Sendinblue)	Transactional e-mails (invoice, password reset)	Name, e-mail
Meta (Facebook/Instagram)	Ad pixel tracking, conversion measurement	Anonymous visit data (cookies)
Google (Analytics/Ads)	Site analytics, ad conversion measurement	Anonymous visit data (cookies)
WhatsApp Business (Meta)	Support messaging	Phone number, message content
HestiaCP / server infrastructure	Web server hosting	All site data (on our server in Türkiye)

We do not sell your data for advertising and do not transfer lists to third parties.

5.Cookies

Our site uses the following cookie types:

Strictly necessary cookies: Session, security, shopping cart — cannot be disabled.
Analytics cookies: Google Analytics, Facebook Pixel — to measure site usage.
Marketing cookies: Meta (Facebook) Pixel, Google Ads — for personalized advertising.

You can manage your cookie preferences from your browser. Blocking analytics/marketing cookies does not affect the site's core functions.

6.Data Retention Period

Account data: While the account is active + 1 year after closure (for backup/dispute resolution)
Invoice/payment records: 10 years as required by law (Tax Procedure Law art. 253)
Marketing consents: Until withdrawn
Cookie data: Up to 24 months
Server log records: 6 months

7.Data Security

Measures we take to keep your data safe:

All traffic is protected with HTTPS/TLS encryption
Passwords are stored hashed with Argon2id (plain text is never stored)
Card data never reaches our servers — it is sent directly to iyzico (PCI-DSS compliant)
Access is limited to authorized persons only (2FA + strong passwords)
Regular backups and security audits (HestiaCP)
Audit log: all administrator actions are recorded

8.Your Rights under KVKK

Pursuant to article 11 of Law No. 6698 (KVKK), you may:

Learn whether your personal data is being processed
Request information if it has been processed
Learn the purpose of processing and whether it is used accordingly
Know the third parties to whom your data is transferred at home or abroad
Request correction of incomplete or incorrectly processed data
Request deletion or destruction of your data ("right to be forgotten")
Request that correction/deletion be notified to third parties to whom data was transferred
Object to a result against you arising from analysis solely by automated systems
Claim compensation if you suffer damage due to unlawful processing

Contact us to exercise your rights

📧 E-mail: info@genixsoft.com.tr
💬 WhatsApp: 0532 174 73 88
✉️ Post: İnönü Mh. Sefa Sk. No:7, Ödemiş/İzmir
⏱️ Response time: Within 30 days at the latest

9.Children's Data

Our services are intended for users over 18. We do not knowingly collect personal data from users under 18. If you notice that data belonging to your child is in our system, please contact us — we will delete it immediately.

10.International Data Transfer

Your personal data is stored on servers in Türkiye. No transfer abroad is made except for the following:

iyzico: Türkiye-based (domestic)
Brevo (e-mail): France/EU-based — on the KVK Board's list of safe countries
Meta/Google/WhatsApp: USA/Ireland — with explicit consent, anonymous cookie data for analytics and advertising

11.Policy Changes

This Privacy Policy may be updated as needed. For significant changes, we notify our registered users by e-mail. The effective date is stated at the top of the page.

12.Contact

For any questions, requests and complaints about this Privacy Policy:

Genix Soft — Cansu Aydın
📧 info@genixsoft.com.tr
💬 WhatsApp: 0532 174 73 88
📍 İnönü Mh. Sefa Sk. No:7, Ödemiş/İzmir