KVKK Notice
Last updated: May 20, 2026
1. Data Controller
Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), Umut Seyarcı ("Pitchko") — an individual tax-registered sole proprietor under Küçükyalı Tax Office, tax number 7660970931 — acts as the data controller and processes your personal data as described below. Address: Altıntepe Mah. Özçiçek Sk. Elif Apt. No:3/1 Maltepe/İstanbul, Türkiye. Contact: info@pitchko.io.
2. Personal Data We Process and Purposes
We process identity data (name, surname), contact data (email, phone), customer transaction data (presentation content, invoice info), security data (IP, log records), marketing data (newsletter signup), and financial data (payment info — processed via iyzico; card data is not stored on our servers). Purposes include service provision, contract performance, legal obligations (tax, KVKK), customer support, product development, and statistical analysis.
3. Legal Basis
Your personal data is processed under KVKK Art. 5/2 based on contract necessity, our legal obligations, and our legitimate interests (without infringing your fundamental rights); marketing-related processing requires your explicit consent.
4. Third Parties and Transfer Purposes
Your personal data may be transferred to our service providers (Supabase — hosting, EU region; Vercel — application infrastructure; Google and Anthropic — AI processing; iyzico — payment, Turkey; Customer.io — transactional email; Sentry — error monitoring) and to competent public authorities to meet legal obligations. Under KVKK Art. 9 (as amended in March 2024), cross-border transfers are only made: (i) to countries with an adequacy decision, (ii) under appropriate safeguards approved by the Authority — Binding Corporate Rules (BCR) or Standard Contractual Clauses (SCCs), or (iii) on the basis of your explicit consent. GDPR/KVKK-compliant Data Processing Agreements (DPAs) are in place with every provider.
5. Retention Period
After your account deletion request, your data is processed in three classes: (1) DELETED — account profile, presentations, feedback, team memberships; automatically purged after the 90-day cancellation window by the sweep cron. (2) ANONYMIZED — API cost logs and token transaction history; the user identifier is set to NULL, audit trail retained. (3) RETAINED — invoice and commercial ledger records, kept under Turkish Commercial Code Art. 82 (10 years) and Tax Procedure Law Art. 253 (5 years); the stricter period applies. Marketing-consent data is deleted immediately upon withdrawal. Detailed retention matrix available on request.
6. Your Rights Under KVKK Art. 11
You have the right to learn whether your personal data is processed, request information about processing, learn the purpose and whether data is used accordingly, know third parties to whom data has been transferred, request correction if data is incomplete/incorrect, request deletion or destruction under KVKK Art. 7 conditions, request notification of correction/deletion/destruction to third parties, object to automated analysis, and demand compensation in case of damages. To exercise these rights, submit a written request to info@pitchko.io.
7. Contact
Submit all KVKK applications and questions to info@pitchko.io. Responses are provided within 30 days at the latest.