Gizlilik Politikası

🇹🇷 KVKK Aydınlatma Metni

6698 sayılı Kişisel Verilerin Korunması Kanunu ("KVKK") kapsamında, Rankie.CO olarak kişisel verilerinizi aşağıda açıklanan amaçlar doğrultusunda işlemekteyiz.

Veri Sorumlusu: Rankie.CO (destek@rankie.co)

İşlenen Kişisel Veriler: Ad-soyad, e-posta adresi, IP adresi, kullanım verileri, ödeme bilgileri (Stripe/PayTR üzerinden — kart bilgileri tarafımızca saklanmaz).

İşleme Amaçları: Hizmet sunumu, hesap yönetimi, fatura ve ödeme işlemleri, müşteri desteği, yasal yükümlülüklerin yerine getirilmesi.

Hukuki Dayanak: KVKK Madde 5/2(c) — sözleşmenin ifası; Madde 5/2(ç) — hukuki yükümlülük; Madde 5/2(f) — meşru menfaat.

Veri Aktarımı: Verileriniz; ödeme işlemcileri (Stripe, PayTR), e-posta hizmet sağlayıcısı (Resend), analitik araçlar (PostHog, Google Analytics) ve AI API sağlayıcıları (OpenAI, Anthropic, Google, Perplexity) ile paylaşılabilir. Yurt dışı aktarımlar KVKK Madde 9 kapsamında gerçekleştirilir.

Saklama Süresi: Hesabınız aktif olduğu sürece veya yasal yükümlülükler gerektirdiği süre boyunca saklanır. Hesap silme talebinde verileriniz 30 gün içinde silinir.

KVKK Haklarınız (Madde 11): Kişisel verilerinize erişim, düzeltme, silme, işlemenin kısıtlanması, itiraz ve taşınabilirlik haklarına sahipsiniz. Başvuru için: kvkk@rankie.co

1. Information We Collect

We collect information you provide directly to us, such as when you create an account (email address, password), set up a workspace (domain name, brand name), or contact us for support. We also collect usage data such as analyses run, features used, and pages visited to improve our service.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services; process transactions; send transactional emails (account confirmation, billing receipts); and respond to your comments and questions. We do not sell your personal information to third parties.

3. Data Storage and Security

Your data is stored on secure servers. We use industry-standard encryption (TLS/HTTPS) for data in transit and AES-256-GCM for sensitive data at rest. Passwords are hashed using bcrypt and never stored in plain text. We retain your data for as long as your account is active or as needed to provide services.

4. Cookies and Analytics

We use session cookies for authentication (strictly necessary — no consent required). We may use analytics tools (PostHog, Google Analytics) to understand how users interact with our service. These tools are only loaded after you provide consent via the cookie banner. You can withdraw consent at any time by clearing your browser's local storage.

5. Third-Party Services

We use Stripe and PayTR for payment processing. Your payment information is handled directly by these processors and is subject to their privacy policies. We use Resend for transactional emails. We use AI APIs (OpenAI, Anthropic, Google, Perplexity, Together.ai, DeepSeek) to run visibility analyses — your domain name and brand name are sent to these services as part of the analysis queries.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to access, correct, or delete your personal data. You may also object to or restrict certain processing of your data, request data portability, and withdraw consent at any time. To exercise these rights, contact us at privacy@rankie.co. You also have the right to lodge a complaint with your local supervisory authority.

7. Data Retention

We retain your personal data for as long as your account is active. Upon account deletion, your data is removed within 30 days, except where retention is required by law (e.g., billing records for 10 years under Turkish tax law). Analysis results associated with your workspace are deleted immediately upon workspace deletion.

8. Contact

For privacy questions (GDPR): privacy@rankie.co
For KVKK requests: kvkk@rankie.co
General support: destek@rankie.co