Privacy Policy (KVKK Aydınlatma Metni)

1. Introduction and Legal Basis

Welcome to Linkfie. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy acts as our official "Aydınlatma Metni" (Information Notice) under the Turkish Personal Data Protection Law No. 6698 (KVKK). Where applicable, it also aligns with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

We collect and process your personal data based on the following legal grounds: Explicit consent, necessity for the performance of a contract (providing the SaaS service), our legitimate interests, and our legal obligations under Turkish law.

2. Data Controller Information

Under the KVKK, the Data Controller determining the purposes and means of processing personal data is:

• Company Name: [ŞİRKET ADI]
• Registered Address: [ADRES]
• Email Contact: hello@linkfie.com

3. Data We Collect and Why We Process It

a) Account and Profile Data

When you register, we collect your email address, a password hash, and the name/username you provide. If you use Google OAuth, we only request read-only access to your basic profile (email and name). We process this data to create and manage your account, authenticate your logins, and provide the core "link-in-bio" service.

b) Analytics and Visitor Data

When your audience visits your Linkfie profile, we collect anonymized analytics data (such as IP addresses stripped of identifying octets, device types, and referrer URLs) to provide you with insights on your dashboard. This data is aggregated and cannot identify individual visitors.

c) Payment Data

We do NOT store your credit card information. When you purchase Linkfie Pro, all payment details are securely processed and stored by our payment partner, iyzico. We only receive a secure token confirming your payment status.

4. Third-Party Processors and Data Transfer

To provide our services reliably, we use industry-standard third-party sub-processors:

• Supabase: Used for secure database hosting and user authentication. (Privacy Policy)
• iyzico: Used for secure payment processing. Your credit card details are entered directly into iyzico's PCI-DSS compliant iframe. (Privacy Policy)

5. Cookies and Tracking

We use essential cookies strictly necessary to maintain your login session and secure your account. We do not use third-party advertising cookies on your admin dashboard. By using the service, you consent to these essential cookies.

6. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, your data will be removed from our active production database within 30 days, and from our encrypted backups within 60 days. Anonymized statistical data may be kept indefinitely for analytical purposes.

7. Data Breach Policy

In the unlikely event of a data breach that compromises your personal data, we will notify you and the Turkish Personal Data Protection Authority (KVKK Kurumu) within 72 hours of becoming aware of the incident, in compliance with KVKK regulations.

8. Your User Rights (KVKK Article 11 / GDPR / CCPA)

Under the applicable data protection laws, you have the right to:

• Learn whether your personal data is being processed,
• Request information regarding the processing of your data,
• Know the purpose of the processing and whether the data is used in accordance with its purpose,
• Request rectification of incomplete or inaccurate data,
• Right to be Forgotten: Request the deletion or destruction of your personal data (this can be done directly from your Dashboard settings),
• Request the transfer of your data to another controller (Data Portability),
• Object to automated decision-making.

To exercise any of these rights, please contact us at hello@linkfie.com. We will respond to your request within 30 days free of charge.