KVKK Notice
Last updated: May 20, 2026
1. Data Controller
Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), Umut Seyarcı ("Pitchko") — an individual tax-registered sole proprietor under Küçükyalı Tax Office, tax number 7660970931 — acts as the data controller and processes your personal data as described below. Address: Altıntepe Mah. Özçiçek Sk. Elif Apt. No:3/1 Maltepe/İstanbul, Türkiye. Contact: info@pitchko.io.
2. Personal Data We Process and Purposes
We process identity data (name, surname), contact data (email, phone), customer transaction data (presentation content, invoice info), security data (IP, log records), marketing data (newsletter signup), and financial data (payment info — processed via iyzico; card data is not stored on our servers). Purposes include service provision, contract performance, legal obligations (tax, KVKK), customer support, product development, and statistical analysis.
3. Legal Basis
Your personal data is processed under KVKK Art. 5/2 based on contract necessity, our legal obligations, and our legitimate interests (without infringing your fundamental rights); marketing-related processing requires your explicit consent.
4. Third Parties and Transfer Purposes
Your personal data may be transferred to our service providers — hosting and data storage, transactional email, live chat, payment processing, AI model APIs, error monitoring and product analytics — and to competent public authorities to meet legal obligations. The complete and current list of providers is published in our Trust Center. Under KVKK Art. 9 (as amended in March 2024), cross-border transfers are only made: (i) to countries with an adequacy decision, (ii) under appropriate safeguards approved by the Authority — Binding Corporate Rules (BCR) or Standard Contractual Clauses (SCCs), or (iii) on the basis of your explicit consent. Each provider processes personal data under its own published data processing terms.
See the full provider list in the Trust Center →5. Retention Period
After your account deletion request, your data is processed in three classes: (1) DELETED — account profile, feedback, team memberships, pending invitations addressed to you, notification history and marketing-list entries; automatically purged after the 90-day cancellation window by the sweep cron. (2) ANONYMIZED — pitch decks you created, API cost logs and credit transaction history; a deck stays with the agency it was made for and your identity is removed from it, so the audit trail is retained without naming you. (3) RETAINED — invoice and commercial ledger records, kept under Turkish Commercial Code Art. 82 (10 years) and Tax Procedure Law Art. 253 (5 years); the stricter period applies. Marketing-consent data is deleted immediately upon withdrawal. Detailed retention matrix available on request.
6. Your Rights Under KVKK Art. 11
You have the right to learn whether your personal data is processed, request information about processing, learn the purpose and whether data is used accordingly, know third parties to whom data has been transferred, request correction if data is incomplete/incorrect, request deletion or destruction under KVKK Art. 7 conditions, request notification of correction/deletion/destruction to third parties, object to automated analysis, and demand compensation in case of damages. To exercise these rights, submit a written request to info@pitchko.io.
7. Contact
Submit all KVKK applications and questions to info@pitchko.io. Responses are provided within 30 days at the latest.