Data we process
Account data: email address, the name you enter, a salted hash of your password, sign-up and last sign-in times, and, if you add them, a phone number and a two-step verification enrolment. Workspace data: the domains, notes, renewal details, reminder settings, watches, notifications, collections and saved views you create. Marketplace data: listings, offers, agreements, moderation decisions and reports that involve your account. Technical data: your IP address, held in server memory to limit request rates, and the country reported by the hosting platform, counted without the IP address. Transactional email: the address and content of the messages we send you.
Purposes and legal bases
To provide the service you asked for and to perform our contract with you (account, workspace, marketplace, reminders and notices you switched on). To keep the service secure and prevent abuse (rate limiting, moderation, audit log), which is our legitimate interest. To comply with legal obligations. We do not use your data for advertising and we do not sell it.
Who processes data for us
Supabase (authentication and database), Vercel (hosting), Resend (transactional email) and, only for administrators reviewing a marketplace listing, TypeSafe (Jev), which receives the public text of that listing and no seller identity. Some of these providers process data outside Türkiye and the European Economic Area; transfers rely on the safeguards those providers offer, such as standard contractual clauses.
How long we keep it
Account and workspace data: while your account exists, and deleted or anonymised when you ask us to close it, unless the law requires us to keep something longer. Marketplace agreements and the audit log: kept as long as needed to resolve disputes and meet legal obligations. Lookup results and rate-limit entries: minutes to hours, in server memory.
Your rights
You may ask whether we process your data, obtain a copy, have it corrected or deleted, restrict or object to processing, receive your data in a portable form, and withdraw a consent you gave. Under Article 11 of the KVKK you also have the right to learn the third parties to whom data is transferred and to claim compensation for damage caused by unlawful processing. You may complain to the Turkish Personal Data Protection Authority (KVKK Kurumu) or to the data protection authority where you live.
To use your rights, write to the contact address on this page from the email address of your account. We answer within thirty days.