KVKK Disclosure Text

Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") was published in the Official Gazette dated April 7, 2016, No. 29677, and entered into force on that date. This Disclosure Text has been prepared pursuant to Article 10 of the KVKK to inform you about the processing of your personal data by KEPT SOFTWARE BİLİŞİM HİZMETLERİ LİMİTED ŞİRKETİ ("Company"), which provides services through SosyalKas.com (the "Site").

1. Data Controller

Under the KVKK, your personal data is processed as data controller by the following Company:

Name: KEPT SOFTWARE BİLİŞİM HİZMETLERİ LİMİTED ŞİRKETİ
Address: Cumhuriyet Mah. Beylikdüzü / İSTANBUL
Tax Office/No: Beylikdüzü Vergi Dairesi - 5441506016
Mersis No: 0544150601600001

2. Categories of Personal Data Processed

• Identity and contact information: full name, email address, phone number
• Account information: username and password (stored as an irreversible hash)
• Customer transaction information: order contents, target social media username/post link, order amount and date, wallet balance movements
• Financial information: invoice/accounting records (your card details are never stored by us; they are processed directly through a licensed payment provider's infrastructure)
• Transaction security information: IP address, browser/device information, session and log records, cookie data
• Marketing information: where you have given explicit consent, preference and interaction records related to email/SMS campaign communications

3. Purposes of Processing Personal Data

• Establishing, operating, and fulfilling membership and order processes
• Processing payments and maintaining invoicing/accounting records
• Managing customer support requests and complaints
• Ensuring site and account security, preventing fraud and abuse
• Fulfilling legal obligations (tax, accounting, statutory reporting, etc.)
• Measuring service quality, statistical evaluation, and improving our services
• Where you have given explicit consent, sending campaign, announcement, and marketing communications

4. Method of Collection and Legal Basis

Your personal data is collected electronically through information you provide directly during actions such as registering, placing an order, making a payment, or submitting a support request on the Site, as well as through automated means (cookies, log records).

This data is processed based on the following legal grounds set out in Articles 5 and 6 of the KVKK:

• Being directly related to the establishment or performance of a contract (order and membership processes),
• Being mandatory for our Company to fulfill its legal obligations (invoicing, accounting, statutory reporting),
• Being mandatory for our Company's legitimate interests, provided this does not harm your fundamental rights and freedoms (fraud prevention, site security, service improvement),
• Your explicit consent (for non-mandatory processing such as marketing/campaign communications).

5. Parties to Whom Personal Data May Be Transferred and the Purposes of Transfer

In accordance with the conditions set out in Articles 8 and 9 of the KVKK, and limited to the purposes above, your personal data may be transferred to:

• Licensed payment institutions/banks, for processing payments,
• The social media service providers/suppliers we work with, for order fulfillment (limited strictly to the minimum link/username information required for the order),
• Hosting, email/SMS delivery, and analytics service providers that support our Site infrastructure,
• Legally authorized public authorities (upon request and to the extent required by law).

6. Retention Period

Your personal data is retained for the periods stipulated by applicable legislation (for example, 10 years for accounting records under the Tax Procedure Law and the Turkish Commercial Code) or for the reasonable period necessary for the purpose of processing. At the end of these periods, your personal data is deleted, destroyed, or anonymized.

7. Data Security

Our Company takes appropriate technical and administrative measures to prevent unlawful processing and access to your personal data and to ensure its safekeeping. Your password is stored as an irreversible hash; your card details are never stored on our Company's servers at any stage.

8. Your Rights as a Data Subject - KVKK Article 11

Under Article 11 of the KVKK, anyone whose personal data is processed has the right to apply to our Company to:

• Learn whether their personal data is being processed,
• Request information about it if it has been processed,
• Learn the purpose of processing and whether the data is used in accordance with that purpose,
• Know the third parties in Turkey or abroad to whom the data has been transferred,
• Request correction if the data has been processed incompletely or incorrectly,
• Request deletion or destruction of the data under the conditions set out in Article 7 of the KVKK,
• Request that the correction, deletion, or destruction actions above be notified to the third parties to whom the data was transferred,
• Object to a result that is to their detriment arising from analysis of the processed data exclusively through automated systems,
• Request compensation for damages arising from unlawful processing of their personal data.

9. Application Method and Timeframe

To exercise the rights listed above, you may submit your request, along with information sufficient to verify your identity, in writing via the support email listed in our Site's footer or through our Contact page. Our Company will conclude your request free of charge within 30 (thirty) days at the latest, depending on its nature; however, if the request requires an additional cost, a fee may be charged in accordance with the tariff set by the Personal Data Protection Board.

10. Right to Complain

If your application is rejected, the response is found insufficient, or no response is given within the required timeframe, you have the right to file a complaint with the Personal Data Protection Board within 30 days of learning our Company's response, and in any case within 60 days of your application date.

11. Changes

This Disclosure Text may be revised in line with changes in legislation or updates to Company practices. The current text takes effect from the moment it is published.

Last updated: August 31, 2026