Privacy Policy
What we collect, why, and the rights you have under KVKK and GDPR.
1. Data we collect
Account details, workspace configuration, and run metadata such as traces and costs.
Account data (name, work email, password hash), workspace settings, and run metadata such as traces, token counts, costs and approval decisions. We also keep security logs such as sign-in times and IP addresses.
2. How we use it
To operate, secure and improve the service — never to train models.
To provide and secure the service, send transactional email (verification, password reset, approvals), provide support, and meet legal obligations. We do not sell personal data and we do not use it to train models.
3. Legal basis
Contract performance and legitimate interest, per KVKK Art. 5 and GDPR Art. 6.
We process data to perform our contract with you, to comply with legal obligations, and for our legitimate interest in keeping the service secure (KVKK Art. 5/2 (c), (ç), (f); GDPR Art. 6(1)(b), (c), (f)).
4. Sub-processors
Hosting, email and payment providers we rely on, and where they are located.
We use a small number of providers for hosting, email delivery and payments, bound by data processing agreements. Data is hosted in the EU; transfers outside the EU and Türkiye rely on standard contractual clauses.
5. Retention
How long traces, logs and account data are kept on each plan.
Traces are kept for your plan’s retention period, then deleted. Account data is kept while your account is active and deleted within 30 days of closure, except where the law requires longer retention.
6. Your rights
Access, correction, deletion and objection — and how to exercise them.
You can request access, correction, deletion, restriction, portability, or object to processing. Most requests can be made from the dashboard; for the rest, email privacy@kolaystack.com and we reply within 30 days.
7. KVKK Aydınlatma Metni
Information notice for data subjects in Türkiye.
Under Law No. 6698 on the Protection of Personal Data, KolayStack acts as data controller for account data and as data processor for workspace content. You may exercise your rights under Art. 11 by applying to kvkk@kolaystack.com.
8. Contact
How to reach our data protection contact.
Questions about this policy or your data: privacy@kolaystack.com. You also have the right to complain to the Personal Data Protection Authority (KVKK) or your local EU supervisory authority.