Privacy and Security Policy

This Privacy Policy explains how personal data is collected, used, stored and protected within the scope of services provided by Bordo Bilişim Ticaret A.Ş. ("MonoChat", "Company", "we", "our"). This policy complies with the Personal Data Protection Law No. 6698 (KVKK).

MonoChat collects the following personal data to provide its services:

• • Identity Information: First name, last name, national ID number (optional)
• • Contact Information: Email address, phone number, address
• • Company Information: Company name, tax number, authorization certificate
• • Technical Information: IP address, browser information, cookie data
• • Transaction Information: Platform usage data, message statistics

Your collected personal data is processed for the following purposes:

• • Providing service and platform access
• • Providing customer support services
• • Invoicing and payment processing
• • Fulfilling legal obligations
• • Improving service quality and conducting analysis
• • Marketing and promotional activities (with explicit consent)

Your personal data is processed based on the following legal grounds specified in Article 5 of the KVKK:

• • Establishment and performance of service contract
• • Fulfillment of legal obligations
• • Protection of our legitimate interests
• • Your explicit consent (for marketing communication)

MonoChat does not share your personal data with third parties except in the following cases:

• • Service providers (WhatsApp, Instagram, Facebook, etc.)
• • Technical infrastructure providers (AWS, Google Cloud, etc.)
• • Official authorities within the framework of legal obligations
• • Special cases where you have given explicit consent

We take the following technical and administrative measures to secure your personal data:

• • End-to-end encryption technology
• • Security policies compliant with ISO 27001 standards
• • Regular security audits and updates
• • Multi-factor authentication against unauthorized access
• • Data backup and recovery systems

Your personal data is retained for the period required by the processing purpose and taking into account the periods stipulated in the relevant legislation:

• • Duration of service contract + 10 years (commercial records)
• • Marketing data: Until the date your explicit consent is withdrawn
• • Log records: 2 years (as per cybersecurity legislation)
• • Financial records: 10 years (as per tax legislation)

Pursuant to Article 11 of the KVKK, you have the following rights:

• • To learn whether your personal data is being processed
• • To request information about your processed personal data
• • To learn the purpose of processing and whether they are used in accordance with their purpose
• • To know the third parties to whom personal data is transferred domestically or abroad
• • To request correction if personal data is incomplete or incorrectly processed
• • To request deletion or destruction of personal data
• • To request notification of correction, deletion and destruction to third parties to whom personal data has been transferred
• • To object to the occurrence of a result against the person by analyzing the processed data exclusively through automatic systems
• • To request compensation for damages in case of damage due to unlawful processing of personal data

To exercise your rights under the KVKK, you can contact us in the following ways:

We use cookies on our website to improve user experience:

• • Necessary Cookies: Required for basic functions of the website
• • Analytical Cookies: To measure website performance
• • Marketing Cookies: To show you relevant advertisements (with consent)
• • Social Media Cookies: For social media integration

This Privacy Policy may be updated as necessary. You will be informed about significant changes via email or through our website.