Confidentiality and Personal Data Policy

The rules we, as BRANDLİFT REKLAM YAZILIM ARGE HİZMETLERİ ANONİM ŞİRKETİ with Mersis (central registration system) number 0009-1245-5510-0001 (hereinafter referred to as “Cypien”), apply regarding how the personal data we collect, during your visit to our website https://cypien.ai/ (hereinafter referred to as the “Website”), is used, with whom and under what conditions it is shared, how long this data is stored, and how it is protected are detailed below within the scope of our disclosure obligation arising from Article 10 of the Personal Data Protection Law No. 6698 ("PDP Law").


In general:

Only your personal data that you approve and/or share directly with us with your explicit consent during your visit to our website is stored. The e-mail address you give us to contact you or your IP address during your visit, your operating system, the browser you use (Chrome, Edge, etc.), your connection time and duration information, and similar information are recorded and stored, if you give your consent, are used for the purpose for which they were given, and are shared with individuals only with your consent. It is always possible to share your data with the relevant and competent authorities within the framework of legal obligations or to use it, provided that it is anonymized.

This Privacy Policy covers the processing of your personal data on our website. Our services and website are not designed for users under the age of 18, and we do not knowingly collect information about minors.


Although Cypien takes utmost care in storing your information, it is not responsible if your information is obtained, changed or deleted by unauthorized entry into the system where your data is stored, or by disrupting or changing the operation of the system.


From time to time, Cypien may include information and links to third-party websites on its website, promotional mailings, or advertisements. When you enter other websites by clicking on these links, we do not control the websites or the practices of these websites, and this privacy policy does not apply to these websites. However, we recommend that you be careful about malware that may grant access to personal data through new windows opened by users. It is important to ensure that your technical settings are configured appropriately for security purposes.


Collecting and Processing of Personal Data, and Purposes for Processing:

First of all, your personal data will not be used for purposes other than those stated above without your explicit consent, and will not be shared or transferred to third parties, except for official institutions/organizations and except for legal obligations. 

Your Personal Data is generally collected electronically through our website. This collection occurs when you log in to our application, use our products or services, create an account, allow marketing promotions, participate in competitions, surveys or research through social media and other resources.

In addition, your personal data may be collected via telephone, mobile, or internet channels during customer interviews, and electronically, verbally or physically during written and digital applications made to our company.

When you log in to our website or application, information about the devices used such as computers and phones, and technical information such as browsers are also collected.

The ways we collect personal data include information provided by third parties, data obtained from publicly available sources, or information shared by you. This information obtained from third parties is used primarily for security purposes and crime prevention. In collecting this data, we comply with the PDP Law and relevant legislation.Transaction Carried out

Your Personal Data Processed

For online visitors who visit our website:


-Transaction Security Information (IP address, website traffic information, etc.)

- Log Records


For online visitors who fill out the forms on our website:



- Identity Information (name, surname)

- Contact Details (e-mail address, phone number)



For online visitors who request to perform a transaction:


- Identity Information (name, surname, TR ID number, tax ID number, username)

- Contact Details (e-mail address, phone number)

- Financial Information (account information in banks and similar institutions, information about the payment card, invoice, IBAN)

- Legal Information (correspondence with judicial authorities and case/execution file information)

- Transaction Security Information (IP address, website traffic information, risk assessments)

- Log Records

- Customer transaction information (information about incoming and outgoing amounts, information about other transactions made by the user)

- Marketing and other related information (professional information, educational information, preferences and priorities for receiving information for marketing purposes, and information on answers to surveys, etc.)

- Technical information (operator and browser type and version information, login and logout information, information on the tool used, location and time zone information, language preferences information, application and related tools used and their version information, technical identification information, information available on the tool used and other information allowed to be accessed by the user, usage and download information)






Your personal data is processed within the scope of the purposes listed in the table below.

Purpose and/or Activity

Personal Data Categories

Legal Reason

Creating a new user record

  • Identification details

  • Contact details


  • Performance of the contract

Ensuring that our services and application operate correctly and that your requests/instructions are processed, managed and fulfilled

  • Identification details

  • Contact details

  • Financial information

  • Customer transaction details

  • Technical information

  • Information about marketing and communication




  • Performance of the contract


Preventing misuse of our services

  • Identification details

  • Contact details

  • Financial information

  • Customer transaction details

  • Technical information

  • Marketing and communication information



  • Legitimate interest

Communication management and product development, service improvement

  • Identification details

  • Contact details

  • Customer transaction details

  • Marketing and communication information


  • Performance of the contract

  • Your explicit consent

Keeping our records up to date and creating transaction profile information of our customers, examining how our customers use our products and services

  • Identification details

  • Contact details

  • Customer transaction details

  • Marketing and contact information


  • Legitimate interest

  • Your explicit consent, if necessary

Carrying out transactions related to payments



  • Identification details

  • Contact details

  • Financial information

  • Customer transaction details



  • Performance of the contract

Ensuring that payments and fees are well managed and that payments due to us are collected and recovered

  • Identification details

  • Contact details

  • Financial information

  • Customer transaction details


  • Legitimate interest

Enabling you to enter a prize draw or competition, or complete a survey

  • Identification details

  • Contact details

  • Customer transaction details

  • Marketing and contact information



  • Performance of the contract

  • Your explicit consent

Collecting market data to study customers' behavior, including their preferences, interests and how they use our products/services, to determine our marketing campaigns and to grow our business

  • Identification details

  • Contact details

  • Customer transaction details

  • Marketing and contact information



  • Legitimate interest

Proper operation of company services, data analysis and testing, and troubleshooting processes


Managing and protecting our business, website, applications, and social media channels, including prohibitions, troubleshooting, data analysis, testing, system maintenance, support, reporting, and data hosting

  • Identification details

  • Contact details

  • Financial information

  • Transaction security information

  • Log records

  • Technical information





  • Legitimate interest

Ensuring the effectiveness of advertising and marketing processes

Delivering relevant website content and advertisements to you and measuring or understanding the effectiveness of the advertising we serve to you

  • Identification details

  • Contact details

  • Financial information

  • Technical information

  • Profile information

  • Log records

  • Marketing and contact information



  • Legitimate interest

  • With your explicit consent

Using data analytics to improve our website, products/services, marketing, customer relationships, and experiences

  • Technical information

  • Usage information

  • Legitimate interest


  • With your explicit consent

Making suggestions and recommendations to you about products or services that may be of interest to you

  • Identification details

  • Contact details

  • Technical information

  • Usage information

  • Profile information

  • Marketing and Communications Data

  • Legitimate interest


  • With your explicit consent

Using the services of social media platforms or advertising platforms that will use the personal data they receive for their own purposes, including marketing purposes

  • Technical information

  • Usage information


  • With your explicit consent

Benefiting from the services of financial institutions, crime and fraud prevention companies, and risk measurement companies, which will use the personal data they receive for their own purposes in the capacity of independent controller

  • Identification details

  • Social Identity Data

  • Contact details

  • Financial information

  • Transaction information

  • Technical information

  • Usage information

  • Legitimate interest

Benefiting from the campaign processes or during the campaign creation processes

  • Identification details

  • Contact details

  • Financial information

  • Customer transaction details

  • Performance of the contract

  • With your explicit consent

  • Due to legitimate interest

Being informed about commercial communications and campaigns

  • Identification details

  • Contact details

  • With your explicit consent

Establishing quality management, training, customer management and development processes

  • Identification details

  • Contact details

  • Visual and audio recordings

  • Legitimate interest


If there are any changes in our privacy policy, the purpose of use of your personal data, or the legal reason, we will notify these changes appropriately to our online visitors and users/customers. This is performed to ensure that you are always informed about how and why your data is used.


Your personal data is also processed to monitor and perform the service, notify authorized institutions, and ensure information security.


In addition, in accordance with the PDP Law No. 6698, your personal data is processed and transferred in accordance with your explicit consent and used in accordance with the legitimate purposes arising from the law.


Periods in which your personal data will be processed:

In accordance with the PDP Law No. 6698, although your personal data processed for the purposes specified in this "Clarification Text on Personal Data Processing" will be stored for a maximum of 5 (five) years, when the purpose requiring processing in accordance with Article 7/f.1 of the PDP Law no longer exists and/or when the statute of limitations for which we are required to process your data in accordance with the legislation expires, your data will be deleted/destroyed or will continue to be used through anonymization.

Situations where our company may process your personal data without your explicit consent:

In accordance with Article 5 of the PDP Law, we may process your personal data specified above and collected in accordance with the law, without your explicit consent, in the following cases:

  • If you, as the data owner, are unable to express your consent due to actual impossibility, or in cases where your consent is not given legal validity, it is necessary to process your personal data in order to protect your own or someone else's life or physical integrity;

  • If processing of personal data belonging to the parties of a contract concluded is necessary, provided that it is directly related to the conclusion or fulfilment of that contract;

  • If it is mandatory for us to fulfill a legal obligation;

  • If data processing is mandatory for the establishment, exercise or protection of any right;

  • If it is necessary to process data for Cypien's legitimate interests, provided that it does not harm your fundamental rights and freedoms.



Parties where your personal data is transferred and purposes of transfer


As part of our privacy policy, we provide a table indicating to which parties and under what conditions your data is transferred, in line with the processing of your personal data, and the purposes of these processes. This table clearly shows the relevant parties to whom your data is transferred, the purpose and legal basis of the transfer.

The table clearly reveals in which cases, to whom and for what purposes your personal data is transferred. For example, data transfer may be based on various legal reasons, such as fulfillment of contractual terms, legal obligations, legitimate interests of the company, or your express consent. This type of table is important to increase the transparency and accountability of our data processing processes.

This data transfer table has been prepared taking into account the legal framework and ethical standards of our data processing activities. It is also designed to ensure that data owners' rights to know how and with whom their data is shared are respected. When any data transfer occurs, action is taken in accordance with relevant legal regulations and best practice standards.


Transferee

Transfer Purpose

Domestic Service Providers (Banks and similar financial institutions; institutions from which services are received such as auditing and custody; external service provider organizations)

Carrying out storage, preservation, processing, and archive activities, carrying out information security processes, carrying out communication activities, managing customer relations, carrying out demand/complaints/application processes

Authorized Public Institutions and Organizations

Fulfilling lawful requests within the scope of legislation, regulatory and supervisory activities, conducting and concluding alternative dispute resolution methods and litigation processes, and requesting them from the courts

Contracted Law Firm

Preparing for alternative dispute resolution methods and lawsuits and completing these processes


Your Legal Rights:

Although, by using our services, you have given us explicit consent for the processing of your personal data, sharing it with third parties, and storing it on servers abroad, you have always the following rights as per the Personal Data Protection Law no. 6698:


  • Learning whether personal data is processed or not;

  • Requesting information if personal data has been processed;

  • Learning the purpose of processing personal data and whether they are used for their intended purpose;

  • Knowing the third parties to whom personal data is transferred at home or abroad;

  • Requesting correction of personal data if it is incompletely or incorrectly processed, and notification of this to third parties;

  • Requesting the deletion or destruction of your personal data and notification of this to third parties;

  • Requesting compensation for damage in case of damage due to illegal processing of personal data.

  • Objecting to the emergence of a result against yourself by analyzing the processed data exclusively through automated systems.

  • We would like to remind you that you reserve the right to withdraw your consent and request the immediate deletion of your personal data from our system.


If you do not consent to the sharing and/or use of your information that will be used or shared due to the changes we have made to the Privacy Policy, you can notify us thereof by sending an e-mail to info@cypien.ai.

We undertake to respond to you as soon as possible and within 30 days at the latest, during the processing and finalization of your requests. During this process, we reserve the right to request additional information or documents from you in order to conduct a detailed review.

Amending the Privacy and Personal Data Policy


This document may be edited and updated without prior notice as new features are added to the website or new suggestions come from our users. Therefore, we recommend that you review the privacy policy each time you visit our website. This document was last updated on 02.10.2023.