At Tekno-X, we prioritize the security and privacy of your personal data. This Privacy Policy explains how your data is collected, processed, and protected under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).
In accordance with KVKK, your personal data is processed by the data controller ELK TEKNOLOJİ OTOMASYON ELEKTRİK MAKİNA TİCARET LİMİTED ŞİRKETİ, located at Yıldırım Beyazıt Mahallesi, Küme Evleri Caddesi, No: 87/B, Melikgazi / KAYSERİ.
Personal Data: Any information relating to an identified or identifiable natural person. Special Categories of Personal Data: Data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance, association membership, health, sexual life, criminal convictions, and biometric and genetic data. Processing: Any operation performed on data such as collection, recording, storage, retention, alteration, reorganization, disclosure, transfer, making available, classification, or blocking. Data Controller: The natural or legal person who determines the purposes and means of processing personal data. Data Subject: The natural person whose personal data is processed (User/Consumer).
Our platform collects the following personal data categories: Identity Data: full name, surname. Contact Data: phone number (for WhatsApp integration), email address (for Google/Firebase login). Transaction Security Data: device information (for mobile app), IP address, access logs. Usage Data: asked questions, conversation history, support requests, factory-specific technical data. Visual/Audio Data: images shared in conversations, voice recordings for speech-to-text (temporary). Financial Data: subscription and billing information. Factory-specific technical data is isolated per tenant and is never shared with third parties.
Your personal data is processed by ELK TEKNOLOJİ for the following purposes: Service delivery and subscription management; technical support and troubleshooting; enabling the AI assistant to respond to your questions; operating the factory memory and RAG system; fulfilling legal obligations (tax, commercial law, KVKK); conducting finance and accounting processes; managing customer relationship processes; conducting information security processes; conducting storage and archive activities.
Your data is not shared with third parties without your explicit consent. The following exceptions apply: iyzico Ödeme ve Elektronik Para Hizmetleri A.Ş. (minimum data required for payment processing), Google Firebase (mobile authentication), legally authorized public institutions and organizations in case of legal obligation. Data sharing parties are obligated to comply with KVKK provisions through contractual clauses and technical measures.
Your personal data is collected through the website (tekno-x.com), mobile application, WhatsApp integration, and email channels via fully automatic means, based on the following legal grounds under Article 5 of KVKK: Necessity for the performance of the contract (subscription service); necessity for the data controller to fulfill its legal obligations (tax, commercial law); necessity for the legitimate interests of the data controller (service improvement, security); explicit consent where required (marketing communications).
All your data is protected with end-to-end encryption (E2E). Tenant-based isolation ensures each customer's data is completely separated from others. No technical data or trade secret processed on our platform is included in the training pool of general-purpose AI models. Database access is strictly controlled through Row-Level Security (RLS) policies. ELK TEKNOLOJİ takes all necessary technical and administrative measures to prevent unlawful processing and access of personal data.
Your personal data is retained for as long as your account is active and for the period required by legal obligations. If you request deletion of your account, your data will be permanently deleted within 30 days. Data subject to legal retention obligations (invoice records, tax documents) is retained for the statutory period of 10 years under the Tax Procedure Law and Turkish Commercial Code. After the retention period expires, your data is deleted, destroyed, or anonymized.
Pursuant to Article 11 of KVKK, you have the following rights: to learn whether your personal data is processed; to request information if processed; to learn the purpose of processing and whether it is used accordingly; to know third parties to whom data is transferred domestically or abroad; to request correction if incomplete or inaccurate; to request deletion or destruction under Article 7 of KVKK; to request notification of correction/deletion/destruction to third parties; to object to exclusively automated analysis producing results against you; to claim compensation for damages caused by unlawful processing.
Last updated: July 2026