A summary of which personal data we process, why, and how we protect it. This is a convenience translation — the binding text is the Turkish original.
⚠️ This English text is an unofficial summary provided for convenience. The legally binding version is the Turkish original at https://mfyyazilim.com/gizlilik-politikasi. In case of any conflict between this summary and the Turkish version, the Turkish version prevails.
MFY Yazılım acts as Data Controller under Turkish Personal Data Protection Law No. 6698 ("KVKK"). This policy covers data we collect via mfyyazilim.com, MFY Connect, Mira, Aksis and our mobile apps.
Identity & contact (name, email, phone, address, Turkish ID/tax number when invoicing requires); customer & financial data (orders, invoices, subscription usage — card details are never stored by us, only by our payment provider); technical security data (IP, device IDs, logs, push tokens); marketing preferences (newsletter opt-in, cookies).
Service delivery (subscriptions, licenses, technical support); billing and accounting; communication and complaint handling; fraud prevention and security; legal compliance (tax, retention); marketing — only with explicit consent.
Contract performance; compliance with Turkish legal obligations; legitimate interests (security, fraud); explicit consent (for marketing communications only).
Data may be shared with payment providers, e-invoice integrators, hosting providers and accounting integrations strictly to deliver the service. Data is stored in ISO 27001-certified data centers in Türkiye; we do not transfer data abroad.
We keep your data only as long as needed: account & contract data for the contract duration plus the legal retention period (tax law typically requires 5–10 years for financial records); marketing data until you opt out; technical logs for up to 12 months.
SSL/TLS encryption, daily backups, role-based access, two-factor authentication, and regular penetration tests. Standard practices under KVKK Article 12.
Under KVKK Article 11 you may request: to learn whether your data is processed; details on processing; to know the recipients; correction of inaccurate data; deletion in legally permitted cases; objection; compensation for damages from unlawful processing.
Send a written request to our headquarters, or email info@mfyyazilim.com / KEP [MFY_TODO_KEP]. We respond within 30 days, free of charge, as required by Turkish law.
Camera permission is used only for barcode scanning (no images stored or transmitted). Microphone permission is required by the scanner component (no audio collected). Internet is required to sync your data. Notifications are opt-in. Data is processed in Türkiye and not transferred abroad. The app is not intended for children under 13. You may delete your account in-app via "Account → Delete Account" or by emailing yasir@mfyyazilim.com.
MFY Yazılım may update this policy due to changes in law or business practice. The latest version is always at this URL.