KVKK Privacy Notice
Last updated:
This notice is given under article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK). The controller is the Pushizo service offered at pushizo.com and app.pushizo.com. Requests: support@pushizo.com. The legal name is published on the imprint when company details are configured.
This notice covers dashboard accounts and visits to the marketing site. For a customer’s end-user data, Pushizo is the processor. The customer provides that notice. Processor duties are in the Data Processing Agreement.
Data processed
- Identity and contact: name, email.
- Account security: password hash, session and security cookies, sign-in time.
- Membership: organization, role, accepted terms version, marketing opt-in.
- Operation security: audit records and the technical data needed for errors and rate limits.
- Invoice details when payments are enabled. Card numbers are not kept by Pushizo.
The marketing site does not set cookies. The theme preference stays in local storage under hs-theme. Details: Cookie Policy.
Purpose and legal ground
| Purpose | Ground (KVKK art. 5) |
|---|---|
| Creating the account, providing the service, support | Contract (art. 5/2-c) |
| Security, abuse prevention, audit | Legitimate interest (art. 5/2-f) and legal obligation (art. 5/2-ç) |
| Retention duties | Legal obligation (art. 5/2-ç) |
| Marketing messages | Consent (art. 5/1). The checkbox is off by default and can be withdrawn. |
Special-category data is not requested to open an account.
Transfers
Subprocessors required to run the service are listed on Subprocessors. A transfer to a provider abroad happens only when you connect that provider or enable an AI feature, and only to the extent that action needs. The transfer relies on the safeguards in KVKK article 9 or on the person’s instruction.
Retention
Account data is kept while the account exists. Records are permanently deleted 30 days after the organization is deleted. With “remember me”, a session lasts at most 14 days. After marketing consent is withdrawn, announcements are not sent.
Your rights (art. 11)
You may ask whether your data is processed, request information, learn whether it is used for its purpose, know the third parties it is transferred to in Türkiye or abroad, request correction or deletion, request that correction or deletion be told to those recipients, object to automated analysis, and claim compensation for unlawful processing.
Send the request to support@pushizo.com with enough detail to verify your identity. The reply is given within the statutory period. If you believe your rights were violated, you may complain to the Personal Data Protection Board.
Security
Passwords are hashed. Secrets are not stored in plain text. The dashboard session is an HttpOnly cookie. Security reports: security@pushizo.com.