Privacy Policy

1. Introduction and Scope

Anysola ("Company", "we", "our", or "us") is committed to protecting and respecting your privacy in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK).

This Privacy Policy describes how we collect, use, process, store, and disclose your personal information when you access or use our website, applications, and services (collectively, the "Services"). This policy applies to all users of our Services, regardless of location.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this Privacy Policy, you must not use our Services.

2. Data Controller Information

For the purposes of applicable data protection laws, Anysola acts as the data controller for the personal information processed under this Privacy Policy.

3. Information We Collect

3.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including:

• Account Information: Name, email address, username, password, and profile information
• Communication Data: Messages, feedback, support requests, and correspondence
• Payment Information: Billing address, payment method details (processed securely by third-party payment processors)
• Content: Files, documents, projects, and other content you upload or create using our Services
• Survey and Research Data: Responses to surveys, questionnaires, and research studies

3.2 Information Collected Automatically

When you use our Services, we automatically collect certain information:

• Usage Data: Pages visited, features used, time spent, click patterns, and user interactions
• Device Information: IP address, browser type and version, operating system, device identifiers
• Location Data: General geographic location based on IP address
• Log Data: Server logs, error reports, and system activity
• Performance Data: Response times, load times, and system performance metrics

3.3 Information from Third Parties

We may receive information about you from:

• Social media platforms (when you connect your accounts)
• Authentication services (OAuth providers)
• Business partners and affiliates
• Public databases and directories

4. Legal Basis and Purposes for Processing

4.1 Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract Performance: To provide our Services and fulfill our contractual obligations
• Legitimate Interest: To improve our Services, ensure security, and conduct business operations
• Consent: Where you have provided explicit consent for specific processing activities
• Legal Obligation: To comply with applicable laws and regulations
• Vital Interest: To protect your vital interests or those of others

4.2 Purposes of Processing

We use your personal information for the following purposes:

• Service Provision: Deliver, maintain, and improve our Services
• Account Management: Create and manage user accounts, authenticate users
• Communication: Send service-related notifications, updates, and support responses
• Payment Processing: Process transactions and manage billing
• Analytics and Improvement: Analyze usage patterns and improve user experience
• Security: Detect, prevent, and respond to security threats and fraud
• Legal Compliance: Meet regulatory requirements and legal obligations
• Marketing: Send promotional materials (with your consent)
• Research and Development: Develop new features and services

5. Information Sharing and Disclosure

5.1 Service Providers and Partners

We may share your information with trusted third-party service providers who assist us in:

• Cloud hosting and infrastructure services
• Payment processing and billing
• Customer support and communication
• Analytics and performance monitoring
• Security and fraud prevention
• Marketing and advertising services

5.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Enforce our Terms of Service and other agreements
• Protect our rights, property, or safety, or that of our users
• Investigate and prevent fraud, security breaches, or illegal activities

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to appropriate confidentiality protections.

6. Data Security and Protection

6.1 Security Measures

We implement comprehensive technical and organizational security measures to protect your personal information:

• Encryption: Data encryption in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Role-based access controls and multi-factor authentication
• Network Security: Firewalls, intrusion detection, and monitoring systems
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Regular security awareness training for all staff
• Incident Response: Established procedures for security incident management

6.2 Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours as required by applicable law.

7. Your Rights and Choices

7.1 Data Subject Rights

Under applicable data protection laws, you have the following rights:

• Right of Access: Request a copy of your personal information we hold
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your information
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing
• Right to Withdraw Consent: Withdraw consent for processing where applicable

7.2 How to Exercise Your Rights

To exercise any of these rights, please contact us at dpo@anysola.com with:

• Your full name and email address associated with your account
• A clear description of the right you wish to exercise
• Any relevant supporting information

We will respond to your request within 30 days (or as required by applicable law).

7.3 Complaint Rights

You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal information in accordance with applicable law.

8. Cookies and Tracking Technologies

8.1 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality and security
• Performance Cookies: Help us understand how visitors interact with our website
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

8.2 Cookie Management

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality.

9. Data Retention and Storage

9.1 Retention Periods

We retain your personal information for as long as necessary to:

• Provide our Services and maintain your account
• Comply with legal obligations and resolve disputes
• Enforce our agreements and protect our legitimate interests

9.2 Data Storage Locations

Your data may be stored and processed in servers located in various countries, including but not limited to Turkey, the European Union, and the United States. We ensure appropriate safeguards are in place for international data transfers.

10. Children's Privacy

Our Services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

11. International Data Transfers

When we transfer your personal information outside your country of residence, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by relevant authorities
• Standard contractual clauses approved by the European Commission
• Binding corporate rules or certification schemes
• Your explicit consent for specific transfers

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.

• Material Changes: We will provide at least 30 days' notice for significant changes
• Minor Changes: We will update the "Last updated" date and post the revised policy
• Notification: We may notify you via email or through our Services

Your continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.

13. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: