Last updated: October 31, 2026
The bracketed fields in this text are not filled in yet: LEGAL_COMPANY_NAME, LEGAL_ADDRESS, LEGAL_EMAIL.
As the operator of the Gentz AI platform, we explain below how we process your personal data under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Obligation to Inform. The Turkish version prevails in case of conflict.
1. Data controller
- Legal name
- [LEGAL_COMPANY_NAME]
- Address
- [LEGAL_ADDRESS]
- [LEGAL_EMAIL]
Important distinction: if you wrote to a business on WhatsApp or Instagram, that business is the controller of your messages and customer record; we process them only on its behalf, as a processor. For information and requests about that data, contact the business (see the Privacy Policy §2). This notice covers the processing for which we are the controller.
2. Personal data, purposes and legal bases
| Data subject | Data categories | Purpose | Legal basis (KVKK Art. 5/2) |
|---|---|---|---|
| Platform users (agency and business staff) | Identity (name), contact (email, phone), user activity (role, assignments, activity logs), security (password hash, two-factor authentication, session, IP address, browser data) | Create and manage accounts, authorisation, provide the service, security and audit logging, support | (c) conclusion and performance of a contract; (ç) legal obligation; (f) legitimate interest (security) |
| Agency / business representatives (our customers) | Identity, contact, customer transaction (subscription, plan, payment and invoice data) | Contract, invoicing, communication | (c) contract; (ç) legal obligation (tax law) |
| Business representative who connects an account through Meta | Meta app-scoped user ID, Instagram account ID and username, granted permissions, access token (encrypted) | Set up and maintain the WhatsApp/Instagram connection, honour deauthorisation and deletion requests | (c) contract; (ç) legal obligation |
| People who contact us | Identity, contact, content of the request | Answer requests | (ç) legal obligation; (f) legitimate interest |
3. How data is collected
Electronically: sign-up and profile forms, automatically while the Platform is used (session and activity logs), Meta’s authorisation flows (Facebook Login / Embedded Signup, Instagram Login) and email.
4. Transfers
Limited to the purposes above, data may be transferred to our hosting and storage provider ([LEGAL_HOSTING]), the email delivery service, Meta Platforms (WhatsApp, Instagram) and Anthropic, PBC (AI) within the features a business enables, and to competent authorities where legally required. Transfers abroad follow Article 9 KVKK (appropriate safeguards / standard contractual clauses, or explicit consent).
5. Retention
Data is kept for the term of the contract and afterwards for the limitation and retention periods set by law, then deleted, destroyed or anonymised. A business workspace’s data is deleted within 30 days after the subscription ends.
6. Your rights (KVKK Art. 11)
You may learn whether your data is processed and request information about it, learn the purpose and whether it is used accordingly, know the third parties it is transferred to in Türkiye or abroad, request correction of incomplete or inaccurate data, request deletion or destruction under Article 7 and notification of these actions to recipients, object to an adverse result arising exclusively from automated analysis, and claim compensation for damage caused by unlawful processing.
7. How to apply
Under the Communiqué on Application Procedures, send your request in writing to [LEGAL_ADDRESS], or from the email address registered with us to [LEGAL_EMAIL]. Requests are answered free of charge within 30 days. For deleting data tied to your Meta account see also the Data Deletion Instructions.
Back to the home page