Privacy notice

Data controller

Kahyam is operated by Muhammed Safa Akkuş, a sole proprietorship. Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller is Muhammed Safa Akkuş.

• Address: Şirinevler Mah. Atatürk Bulvarı No: 18 D: 13, Merkez / Batman, Turkey
• Tax office: Batman Tax Office
• Email: support@kahyam.com.tr

Data we process

When you use Kahyam, the following data is processed:

• Account data: name, email address and an irreversible hash of your password (the password itself is never stored). If two-step verification is on, its secret and backup codes.
• Session and security records: sign-in time, IP address, browser information, and an activity log showing who did what in the panel.
• Store connection credentials for the sales channels and services you connect (today Wix, Trendyol, E-Faturam and Geliver). These are stored encrypted and never shown on screen again.
• Store operating data: order numbers and amounts, products, stock counts, invoice numbers, shipping status, costs and expenses.
• If you fill in the early access form or email us: your name, email address, phone (if given), store name and address, the channels you sell on, monthly order range and your message. To prevent abuse of the form, we keep not your IP address itself but an irreversible digest of it, made with a secret key and changing daily.

Your customers' details

The names, addresses and phone numbers of people who buy from your store are not stored in Kahyam. When an invoice or a shipping label needs them, they are read from the connected service (for example Wix) at that moment and used only for that action. For your customers' data, the store owner is the data controller and Kahyam is a data processor acting on the store owner's instructions.

Purposes and legal grounds

Data is processed for these purposes, on these grounds under Article 5 of KVKK:

• Providing the service (accounts, connecting your store, managing orders, invoices, shipping and stock): establishing and performing the contract.
• Account security, abuse prevention and activity logs: legitimate interest.
• Legal obligations such as issuing e-archive invoices on your instruction: compliance with legal obligations.
• Reviewing early access requests and getting back to you: directly related to entering into a contract; preventing abuse of the form: legitimate interest.

Transfers and where data is stored

Kahyam's database and store vaults are hosted in Cloudflare, Inc. data centers in the European Union. Alert and digest emails are sent through Zoho Corporation's servers in the European Union. As these servers are outside Turkey, personal data is transferred abroad within the meaning of Article 9 of KVKK. This transfer is necessary to provide the service.

The sales channels and services you connect (today Wix, Trendyol, E-Faturam and Geliver) only receive the data needed for actions you start or approve. Your data is never shared for advertising or marketing, and never sold.

Retention

Data is kept while your account is open. When you ask to close your account, your data is deleted, except records the law requires us to keep. Early access requests are kept for at most 1 year and are deleted automatically after that.

Cookies

Kahyam only uses cookies that are strictly necessary to keep you signed in and secure. No advertising, tracking or marketing cookies are used.

Your rights

Under Article 11 of KVKK you have the right to:

• learn whether your personal data is processed and request information about it,
• learn the purpose of processing and whether it is used accordingly,
• know the third parties in Turkey or abroad to whom it is transferred,
• ask for incomplete or inaccurate data to be corrected,
• ask for deletion or destruction under the conditions in the law,
• ask for corrections and deletions to be notified to those third parties,
• object to an outcome against you arising solely from automated analysis,
• claim compensation for damage caused by unlawful processing.

How to apply

Send your requests to support@kahyam.com.tr. We reply free of charge within 30 days at the latest.