KVKK Privacy Notice
Version 1.0Last updated:
This notice has been prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, to explain how your personal data is processed through the finanomix.com website, waitlist and contact form.
When the Finanomix mobile app is released, a separate notice will be provided for app-specific processing.
1. Data Controller
Your personal data is processed by Praxtify, LLC (“Finanomix”, “we”), the owner of the Finanomix brand, as the data controller. You can reach us at info@finanomix.com for any request under the KVKK.
2. Personal Data We Process
- Waitlist: email address, language preference, the date and time you ticked the consent boxes, the version numbers of the accepted texts and an irreversible hash of your IP address.
- Contact form: name, email address, subject and message content.
- Email interactions: delivery, bounce, complaint and unsubscribe status of the emails we send.
- Technical data: browser and device type, visited page and error logs for security and error tracking. Email addresses, IP addresses and form contents are not included in error logs.
No financial data such as income, expenses, bank account or card details is collected on the website.
3. Purposes Of Processing
- creating your waitlist registration, verifying your email address (double opt-in) and notifying you when the app is released,
- sending newsletters, announcements, promotional and tips emails if you have given consent,
- answering questions and requests sent through the contact form,
- recording consents and unsubscribe requests to fulfil our legal obligations,
- keeping the website secure, preventing abuse (spam, bots) and detecting errors.
4. Collection Method And Legal Basis
Your personal data is collected electronically, partly by automated means, through the website forms, email interactions and server logs, and is processed on the following legal grounds:
- Commercial electronic messages: your explicit consent (KVKK Art. 5/1) and the approval you give under Law No. 6563 on the Regulation of Electronic Commerce,
- running the waitlist and answering contact requests: our legitimate interest, provided that it does not harm your fundamental rights and freedoms (KVKK Art. 5/2-f),
- keeping consent and opt-out records: necessity for compliance with our legal obligations (KVKK Art. 5/2-ç),
- security and error tracking: our legitimate interest (KVKK Art. 5/2-f).
5. Transfers Of Personal Data
Your personal data is never sold or shared with third parties for advertising. It is transferred, only for the purposes above, to the following service providers whose servers are located outside Türkiye:
| Provider | Purpose | Data location |
|---|---|---|
| Supabase Inc. (USA) | Database; storing waitlist and contact records | EU (Ireland) |
| Vercel Inc. (USA) | Website hosting and server processing | EU (Ireland); global content delivery |
| Resend Inc. (USA) | Email delivery and subscription management | USA |
| Functional Software Inc. – Sentry (USA) | Error tracking (no personal data is sent) | EU (Germany) |
| Upstash Inc. (USA) | Abuse protection (rate limiting) and background jobs | EU |
| Google LLC – Google Workspace (USA) | info@finanomix.com mailbox (contact messages) | USA and other countries |
Transfers abroad are made with the appropriate safeguards set out in Article 9 of the KVKK and related legislation (including standard contracts). Data may also be disclosed to authorised public authorities upon lawful request.
6. Retention Periods
- Waitlist registration: until you unsubscribe or request deletion. Unconfirmed registrations are deleted within 30 days.
- Consent and opt-out records: 3 years from the withdrawal of consent.
- Contact messages: 2 years from the resolution of the request.
- Error logs: up to 90 days.
Data is deleted, destroyed or anonymised when its retention period ends.
7. Your Rights
Under Article 11 of the KVKK, you may apply to the data controller to exercise the following rights:
- to learn whether your personal data is processed,
- to request information if it has been processed,
- to learn the purpose of processing and whether it is used accordingly,
- to know the third parties in Türkiye or abroad to whom it is transferred,
- to request correction if it is incomplete or inaccurate,
- to request deletion or destruction under the conditions in Article 7 of the KVKK,
- to request that corrections, deletions and destructions be notified to the third parties to whom the data was transferred,
- to object to a result against you arising from analysis exclusively by automated systems,
- to claim compensation for damages arising from unlawful processing.
8. How To Apply
You can send your requests, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, to info@finanomix.com together with information that allows us to verify your identity. Your request will be answered free of charge within 30 days at the latest; if the process requires an additional cost, the fee set by the Personal Data Protection Board may be charged.
You can withdraw your email consent at any time using the unsubscribe link at the bottom of every email we send. Details on commercial messages are in the Commercial Electronic Messages Consent.