Protection of personal data
Privacy Policy
This policy explains how Proyo Soft processes personal data when you visit our website or contact us.
Last updated: July 22, 2026
Scope and data controller
Proyo Soft acts as the data controller for personal data processed through this website under Turkish Personal Data Protection Law No. 6698 (“KVKK”). This policy applies to website visitors, people who use the quote form, and people who contact us by email.
Personal data we process
Depending on the information you provide and how you use the website, we may process the following categories of data:
- Identity and contact data: Full name, email address, and phone number.
- Business and inquiry data: Company name, service interest, project details, and message content.
- Security and technical data: IP address, request time, browser and device type, referring page, visited pages, and error logs.
- Usage and performance data: Page views, approximate geographic region, and aggregate measurements such as loading and response times.
- Communication records: Email correspondence used to respond to your inquiry.
How we collect data
We collect personal data from the information you enter in the quote form, emails you send to us, and technical data automatically generated by server logs and measurement tools during your visit.
Why we process data
We may process personal data only as necessary for the following purposes:
- Responding to questions and communicating with you.
- Assessing your needs, preparing a quote, and taking pre-contractual steps.
- Providing requested services and managing customer relationships.
- Maintaining the website's security, availability, and performance.
- Improving the website and services through aggregate usage analysis.
- Meeting legal obligations, managing disputes, and protecting our rights.
Legal grounds
We may rely on the necessity of processing for entering into or performing a contract, compliance with legal obligations, the establishment, exercise, or protection of legal rights, and our legitimate interests where these do not override your fundamental rights. Where consent is legally required, we process data only within the scope of the consent you provide, which you may withdraw at any time.
Sharing and service providers
We may share data only to the extent required for the stated purposes with service providers that operate under confidentiality obligations. We use Vercel for website hosting and measurement and Resend to deliver form inquiries by email.
We may also provide information to legally authorized public bodies, courts, or advisers where required to comply with law or protect legal rights. We do not sell personal data.
International data transfers
The servers or support teams of technology providers such as Vercel and Resend may be located outside Türkiye. Data may therefore be transferred internationally only as necessary to provide the service and where an adequacy decision, appropriate safeguard, or another lawful transfer mechanism under KVKK is available.
Retention and deletion
We retain personal data for as long as necessary for the purpose for which it was collected and for any limitation or retention period required by applicable law. When the relevant period ends, data is deleted, destroyed, or anonymized in accordance with applicable law and technical capabilities.
Data security
We use reasonable technical and organizational safeguards, including access restrictions, secure communication methods, and service-provider controls, to reduce the risk of unauthorized access, loss, alteration, or disclosure. No method of internet transmission or storage can provide an absolute security guarantee.
Your rights
Under Article 11 of KVKK, you may ask whether your personal data is processed; request information about processing; learn its purpose and whether it is used accordingly; learn the recipients in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction where the legal conditions apply; request notification of correction, deletion, or destruction to recipients; object to an adverse result produced exclusively by automated analysis; and claim compensation for damage caused by unlawful processing.
How to exercise your rights
Children's privacy
The website is not directed to children, and we do not intend to knowingly collect personal data from children. If you believe a child's data has been shared without authorization, contact us to request its deletion.
Changes to this policy
We may revise this policy when our processing activities or legal requirements change. The current version will be published on this page together with the last-updated date.