Privacy and Cookie Policy

1. Who is responsible for your data

This policy is published by Kürşat Kutay, a sole proprietor trading under the brand Koby Soft ("we"), who is the controller of the personal data described here. Address: Antalya. Contact: info@kobysoft.app.

2. What this policy covers

This policy applies only to the website kobysoft.app.

3. What data we collect

• Messages you send us. If you use a contact form, we receive your name, email address, your message and, if you give one, your phone number. If you contact us by email, WhatsApp or phone, we receive what you send through that channel.
• Site usage data, only if you accept. Through Google Analytics we see which pages are visited, for how long, the type of device and browser, your approximate location, how you reached the site, and cookie identifiers.
• Technical logs. Our hosting provider automatically records your IP address, browser type and the time of your visit in server logs, for security and reliable operation.
• Your cookie choice.

Please do not put sensitive details, such as health information, into our forms.

4. Why we use it

• To answer your message, tell you about our products and services, and keep a record of our correspondence.
• To understand how many people use the site and how, so we can improve it (only if you accept).
• To keep the site secure and working.

We do not use your data for advertising, profiling or marketing, we do not sell it, and we do not use social-media tracking code.

5. Our legal basis

• Consent for analytics cookies and for the tick box on our contact forms (GDPR Article 6(1)(a); KVKK Article 5/1).
• Steps at your request before a contract, when you ask us about our services (Article 6(1)(b)).
• Legitimate interest in replying to business enquiries, keeping correspondence and keeping the site secure (Article 6(1)(f)).

You can withdraw consent at any time. This does not affect what happened before.

6. Who receives your data

We share data only with providers that process it for us, to the extent needed to run the site and our email:

• Vercel Inc. (hosting)
• Cloudflare, Inc. (domain name system and network protection)
• Migadu (email hosting)
• Google LLC (Google Analytics and Google Tag Manager)
• Resend (sending contact form emails)

If you write to us on WhatsApp, Meta's WhatsApp service processes your message under its own terms. Some of these providers are outside your country, including in the United States, so your data may be transferred abroad. Where that happens we rely on your consent or on the safeguards the law requires, such as adequacy decisions or standard contractual clauses. We may also disclose data where the law requires it.

7. Cookies

A cookie is a small text file that a website stores in your browser. We use analytics cookies only to measure how the site is used, and we switch them on only after you choose Accept.

If you choose Decline, no analytics cookies are set. Google tags may still send limited signals that do not write cookies to your device, and Google may process technical details in them, such as your IP address, for aggregate statistics. You can change your choice at any time with the Cookie settings link at the bottom of each page, and you can delete cookies in your browser settings.

8. How long we keep it

Google Analytics data is kept for 14 months. Correspondence is kept for 24 months after our last contact. Server logs are kept for the period set by our hosting provider. After that your data is deleted or anonymised.

9. Your rights

You can ask us for access to your data, correction, deletion, restriction of processing and a portable copy, and you can object to processing based on our legitimate interest. You can withdraw consent at any time. Under Turkish law (KVKK Article 11) you may also ask to learn to whom your data was transferred and claim compensation for unlawful processing.

To use these rights, write to info@kobysoft.app. We may ask you to confirm your identity. We reply within 30 days.

10. Complaints

If you are unhappy with our reply, you can complain to the authority where you live: the Information Commissioner's Office (United Kingdom), your national data protection authority (European Union) or the Personal Data Protection Board, KVKK (Türkiye).

11. Changes

We may update this policy. The current version is always on this page, with its "Last updated" date.