PIYZI KVKK DATA PROTECTION NOTICE
This is a courtesy translation provided for convenience. In case of any discrepancy, the Turkish version of this document prevails.
KVKK (Law No. 6698 on the Protection of Personal Data) is Turkey's comprehensive data protection legislation, equivalent to the EU's GDPR.
1. Data Controller
Piyzi Technology Inc. (Piyzi Teknoloji A.S.) Address: GOSB Teknopark (Gebze Technology Park), Kemal Nehrozoglu Cad. 41480 Gebze, Kocaeli, Turkey Email: hi@piyzi.com
2. Personal Data We Process
- Identity information
- Contact details
- Appointment records
- Technical usage data
- Security data: IP address, session and log records, a device signature derived from your device's technical characteristics, and a device identifier stored in your browser (see 4.1)
3. Purposes of Data Processing
- Providing our services
- Managing appointments and communications
- Fulfilling legal obligations
- Operating the in-app AI help assistant, measuring answer quality and improving help content (questions and answers are stored; phone numbers and e-mail addresses are automatically masked before storage)
- Producing a fast first reply to your support requests: the message text and any screenshots you attach are sent to our AI service provider (OpenAI) for evaluation
- Detecting multiple accounts that may belong to the same person, and protecting the platform against misuse (see 4.1)
4. Legal Basis
Under KVKK Articles 5 and 6 (Kanun madde 5 ve 6):
- Performance of a contract (Sozlesmenin ifasi)
- Legal obligations (Yasal yukumlulukler)
- Legitimate interests (Mesru menfaat)
4.1. Device Signature and Multiple-Account Detection
To keep accounts secure and protect the platform against misuse, we process certain technical characteristics of your device when you register for or sign in to the business panel: screen dimensions, operating system and browser family, language and time zone, processor and memory class, and the drawing behaviour of your graphics unit. We also store a random device identifier in your browser that only Piyzi can read.
These values are not stored individually. They are irreversibly hashed into a device signature used solely to compare one record with another; raw values are not kept in our database.
For this processing activity:
- No decision is made solely by automated means. The system only surfaces possible links. No decision that would close or restrict your account, or otherwise affect your rights, is taken automatically; a Piyzi employee always makes the assessment.
- It is never used for advertising or marketing, never shared with third parties and never sold.
- It is not transferred abroad. The device signature is generated and stored on Piyzi's own infrastructure; no data is sent to any external provider for this purpose.
- It applies only to business accounts. No such processing takes place on the online booking pages you use as a customer of a business.
See section 7 regarding your right to object to this processing.
5. Data Transfers
Piyzi does not sell your personal data. Data is shared only to the extent necessary to deliver the service — with infrastructure/hosting providers, messaging (SMS, e-mail, WhatsApp Business) providers and licensed payment institutions — and with competent authorities where required by law. Where a provider's servers are located abroad, transfers are carried out in accordance with Article 9 of the KVKK.
6. Data Retention
Data is retained for the duration of the service. When an account is closed, data is deleted or anonymized.
Specific periods apply to security data: your IP address is kept in readable form for at most 90 days, after which it is irreversibly hashed and can only be used for comparison. Device signatures and session records are kept for at most 1 year.
7. Your Rights as a Data Subject
Under KVKK Article 11 (Kanun madde 11), you have the right to:
- Request information about your data
- Request corrections
- Request deletion
- Object to processing
How to Reach Us
hi@piyzi.com