KVKK (Turkish GDPR) Privacy Notice

Under Law No. 6698 on the Protection of Personal Data, we explain how we process your personal data.

Last updated: July 2026

1. Data Controller

With respect to the users (sellers) who use its services, Verimle acts as the data controller. With respect to data belonging to the seller's own customers, Verimle is the data processor acting on the seller's instructions.

2. Personal Data Processed

  • Identity and contact: full name, email.
  • Account and billing: subscription status, payment information (via our payment provider).
  • Store/integration: marketplace seller ID and encrypted API keys.
  • Usage data: session, transaction records, and technical logs.
  • Analytics cookie data (only with consent): anonymous site traffic; not linked to an individual, and no IP address is stored.

3. Purposes of Processing

  • Providing the service and managing your account
  • Running subscription and payment processes
  • Handling support requests and ensuring security

4. Legal Grounds

Data is processed on the legal grounds of the establishment/performance of a contract, the fulfillment of a legal obligation, and legitimate interest. Where explicit consent is required, your consent is obtained separately.

5. Transfers

Data is shared with service providers such as hosting, payments, and artificial intelligence only to the extent required for the service. For transfers abroad, the safeguards required by KVKK are ensured.

6. Retention Period

Data is retained for the period required by the purpose of processing and prescribed by applicable legislation; at the end of that period it is deleted, destroyed, or anonymized.

7. Your Rights (KVKK Art. 11)

You have the right to access, rectify, and erase your personal data, to learn whether it is being processed, and to object to processing. You can submit your requests to destek@verimle.com.

KVKK Privacy Notice | Verimle