Privacy Policy
The security of your personal data and your privacy are important to us.
This translation is provided for informational purposes only. The legally binding version of this document is the Turkish one.
Dear Users,
As Heysengo Teknoloji A.Ş. ("Heysengo" or the "Company"), we attach the utmost importance to the security of your personal data. This Privacy Policy has been prepared to inform you about how your personal data is collected, the purposes of processing, the parties to whom it is transferred, and your rights, in accordance with Law No. 6698 on the Protection of Personal Data ("KVKK") and related legislation.
1Personal Data Collected
We may collect the following personal data when you use our platform:
- Identity Information: First name, last name, national ID number (when required)
- Contact Information: Email address, phone number, address
- Customer Transaction Information: Request and order details, invoice information
- Transaction Security Information: IP address, log records, passwords and credentials
- Marketing Information: Cookie records, purchase history, survey responses
2Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
3Transfer of Personal Data
Your personal data may be transferred to our business partners, suppliers, legally authorized public institutions and private persons, within the framework of the personal data processing conditions set out in Articles 8 and 9 of the Law. Data transfer takes place where services are provided, where there are legal obligations, or where your explicit consent exists.
AI Service Providers (Sub-processors)
The AI assistant in the store panel (Heysi) and other AI features run on the infrastructure of the service providers below. These providers process data on Heysengo's behalf solely to answer the request:
- Anthropic, PBC (United States) — Claude models
- Google LLC (United States) — Gemini models
- NVIDIA Corporation (United States) — fallback models (when the other providers are unavailable)
Purpose of processing: generating store-management suggestions (product copy and SEO suggestions, collection and campaign drafts, sales, stock and order summaries, draft replies to customer reviews and messages). Suggestions are not applied to the store until an authorised store user approves them.
Data transferred:
- Product and catalogue information (title, description, category, price, stock)
- Order and sales summaries (amount, quantity, date, city-level location)
- The text of customer reviews and messages, with the customer's name, email address and phone number masked (e.g. "A*** Y***")
- Request texts written to the AI assistant
Because these providers' servers are located abroad, the data above is transferred abroad in accordance with Article 9 of Law No. 6698. Authentication details, payment details and integration keys are not sent to AI providers.
Under Anthropic's and Google's commercial API terms, data sent this way is not used to train the providers' models. AI conversations are kept for at most 90 days.
4Rights of the Data Subject
Pursuant to Article 11 of the KVKK, as a data subject you have the following rights:
- To learn whether your personal data is being processed,
- To request information if it has been processed,
- To learn the purpose of processing and whether it is used in accordance with that purpose,
- To know the third parties to whom it is transferred domestically or abroad,
- To request correction if it has been processed incompletely or incorrectly,
- To request compensation for damages if you suffer loss due to unlawful processing.
5Contact
You can contact us for any questions and requests regarding your personal data: