01Introduction
QNSET Software Development ("QNSET", "Data Controller") is a company registered and operating in Ankara, Türkiye. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, register for an account, or use our services. It is prepared in compliance with the Turkish Law on Protection of Personal Data No. 6698 ("KVKK") and the EU General Data Protection Regulation ("GDPR").
02Data Controller
- Company Name
- QNSET Software Development
- Registered Address
- Ankara, Türkiye
- Contact Email
- privacy@qnset.com
- Data Protection Officer
- dpo@qnset.com
03What data we collect
We collect only the data we need to provide and secure our Services. This includes:
- Account information
- email address, password hash, and role or profile identifiers.
- Contact information
- name and email when you contact us or request a quote.
- Technical data
- IP address, browser type, device type, operating system, and session identifiers.
- Usage data
- pages visited, login history, API requests, and error logs.
- Website visit records
- when you browse our public website, we record your IP address, your approximate country (provided by Cloudflare, which delivers our website, based on your IP address), your browser’s user agent, the pages you visit and when, and how you arrived: a source category such as Instagram or search, plus a campaign tag if the link had one (never the full link or the referring web address). The pages of a visit are linked together by a keyed hash of your IP address and browser, not by a cookie. If you join a waitlist during a visit, that is recorded as a step of the visit (without your email address), so it can be linked to the email address you gave for the waitlist. We use these records to understand how visitors use the site.
- Communications
- emails and support messages you send us.
- Project data
- source code, configuration, and assets you upload for development or hosting purposes.
05Why we process your data
We use your data to:
- Create, authenticate, and manage your account.
- Provide and maintain our software and infrastructure services.
- Communicate with you about your account, security, and support requests.
- Monitor service health and detect misuse or security incidents.
- Understand how visitors use our website.
- Comply with legal, tax, and regulatory obligations.
06Legal basis
We process personal data where necessary to perform our contract with you, for our legitimate interests in securing and improving our Services and in understanding how visitors use our website, to comply with legal obligations, and, where required, with your consent.
07Data retention and deletion
We keep your data only as long as necessary:
- Active accounts
- retained while your account is in use.
- Inactive accounts
- accounts with no login or activity for 24 consecutive months are automatically deleted, including associated personal data.
- Deleted accounts
- backup copies are purged within 90 days unless legal retention requires otherwise.
- Financial records
- retained for the period required by Turkish tax and commercial law.
- Website visit records
- kept for 30 days, then deleted automatically.
09International transfers and security
We implement technical and organizational measures to protect your data, including encryption in transit, access controls, monitoring, and regular security reviews. Your data is stored and processed on our servers in Ankara, Türkiye. As Türkiye has not received an EU adequacy decision, transfers of personal data from the EEA to Türkiye rely on Standard Contractual Clauses approved by the European Commission, together with supplementary measures documented in our Transfer Impact Assessment. In the event of a personal data breach, we will notify affected users and relevant authorities as required by law.
10Your rights
Under KVKK and GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data, subject to legal retention.
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Lodge a complaint with the KVKK Board or your EU supervisory authority.
11Children's privacy
Our Services are not intended for individuals under 18. We do not knowingly collect personal data from children. If we learn that a child has provided us with personal data, we will delete it promptly.
12Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page and, where appropriate, notified by email. You can manage your email preferences at any time on our email preferences page.
13Contact
For privacy questions or to exercise your rights, contact us at dpo@qnset.com or write to QNSET Software Development, Ankara, Türkiye.