Privacy Policy

1. Data Controller

The data controller for KolayLinks is TALYA SMART, Ebiltem Ek-2 Mor Bina, Ege Üniversitesi Teknopark, Erzene Mah. Ankara Cad. No:172/14, 35100 Bornova/İzmir, Turkey. Email: destek@kolaylinks.com

2. Personal Data We Collect

We process the following categories of personal data:

  • Account data: name, email address, username and password upon registration.
  • Profile content: links, images, biography and other content you publish on your profile.
  • Usage data: page visits, link clicks, browser type, device type and IP address.
  • Session data: authentication tokens stored via secure cookies.

3. Legal Basis for Processing (GDPR Art. 6)

We process your data on the following legal bases:

  • Contract performance (Art. 6(1)(b)): to provide the services you registered for.
  • Legitimate interests (Art. 6(1)(f)): to improve our service and prevent fraud.
  • Consent (Art. 6(1)(a)): for optional communications. You may withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c)): where required by applicable law.

4. Purpose of Processing

Your data is used to:

  • Provide, operate and maintain the KolayLinks service.
  • Authenticate your identity and secure your account.
  • Send service-related notifications and updates.
  • Analyse usage patterns to improve user experience.
  • Comply with legal and regulatory obligations.

5. Data Sharing and Third Parties

We do not sell your personal data. We engage the following processors under GDPR-compliant data processing agreements:

  • Supabase Inc.: database, authentication and storage infrastructure.
  • Vercel Inc.: web hosting and content delivery.

We may disclose data to competent authorities where required by law.

6. Data Retention

We retain your personal data for as long as your account is active. Upon deletion of your account, your personal data is permanently erased within 30 days. Anonymised usage statistics may be retained indefinitely.

7. Your Rights Under GDPR

If you are located in the EU/EEA, you have the following rights:

  • Right of access (Art. 15): obtain a copy of your personal data.
  • Right to rectification (Art. 16): correct inaccurate or incomplete data.
  • Right to erasure (Art. 17): request deletion of your data ("right to be forgotten").
  • Right to data portability (Art. 20): receive your data in a structured, machine-readable format.
  • Right to object (Art. 21): object to processing based on legitimate interests.
  • Right to restriction (Art. 18): request restricted processing in certain circumstances.

To exercise your rights, email destek@kolaylinks.com. We will respond within 30 days.

8. Cookies

We use strictly necessary cookies for authentication and session management. We do not place advertising or non-essential tracking cookies without your explicit consent.

9. Security

We apply industry-standard safeguards including TLS encryption in transit and encrypted storage. Please notify us immediately of any suspected security incident.

10. International Transfers

Our service infrastructure is primarily located in the EU/EEA. Any transfer of personal data outside the EEA is covered by appropriate safeguards (Standard Contractual Clauses or adequacy decisions) in accordance with GDPR Chapter V.

11. Children's Privacy

KolayLinks is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If we become aware of such collection, we will promptly delete the data.

12. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or through a prominent notice in the service. Continued use after the effective date constitutes acceptance.

13. Supervisory Authority

You have the right to lodge a complaint with your competent supervisory authority (in Turkey: KVKK; in the EU: your national Data Protection Authority). We encourage you to contact us first at destek@kolaylinks.com.