Privacy Notice
This notice explains how Katipia handles personal data, including under Turkey's Personal Data Protection Law (KVKK).
1. Who is responsible
For the pilot request form on our website, the controller of your personal data is the person or company operating Katipia (name and address are at the bottom of the page).
If you are a wholesaler using Katipia, you are the controller of the order messages your dealers send, and we act as your processor. We set this out in writing with you during the pilot.
2. What we process
Pilot form: company name, work e-mail, the ERP you use and your message. To prevent abuse we also store a one-way hash of your connection address; the address itself is not stored.
When you use the service: messages, e-mails and attachments (PDF, Excel, photos) from your dealers, the sender's phone number or e-mail, the order lines the system extracts, staff accounts (username, name, a hash of the password) and an activity log showing who approved what.
3. Why and on what basis
We process data to answer your pilot request, read orders and prepare them for your ERP, keep the service secure and prevent abuse. Legal bases: necessity for a contract, our legitimate interest, and legal obligations.
We do not sell your data or use it for advertising.
4. Who we share it with
We use these providers to run the service: Vercel (hosting), Supabase (database and file storage, Frankfurt, Germany), Anthropic (AI reading of orders: the content of the message and attachment is sent to it) and Google (sending notification e-mails; reading the inbox when the e-mail channel is on).
Because these providers operate outside Turkey, your data is transferred abroad. The transfer is necessary to provide the service.
5. How long we keep it
Pilot request details are kept as long as needed to answer you. Order data processed during the pilot is deleted at the end of the pilot on your written request.
Error and backup records are kept for a limited period for security.
6. Cookies and third-party requests
The website uses no cookies and no analytics or advertising tools. When you log in to the app, only an essential session cookie is set.
The page loads fonts from Google Fonts, so your browser connects to Google and your IP address is visible to Google.
7. Your rights
You may ask whether we process your data, request information about it, ask for correction, deletion or destruction, object to processing, and claim compensation for damage, as provided in Article 11 of KVKK.
Send requests through the pilot form on our website. We reply within thirty days.