Privacy policy and KVKK notice

This notice explains which of your personal data is processed, and why, when you use SEO Rapor, under the Turkish Personal Data Protection Law No. 6698 (KVKK, the Turkish equivalent of the GDPR).

1. Data controller

Alatlı Creative (Ozan Alatlı, sole proprietorship), Türkiye. Contact: ozan@alatli.dev.

2. Data we process

• Account data: name, e-mail address, a one-way hash of your password (the password itself is not stored).
• Session data: session duration, IP address and browser information (for security and to prevent abuse).
• Order data: the package purchased and the payment status. Your card details never reach us; Paddle receives the payment.
• Service data: the domains you add, verification records, scan results and your token movements.

3. Purposes and legal bases

• Creating your account, providing the service and showing you your reports (performance of the contract).
• Managing payments and your token balance (performance of the contract, legal obligation).
• Keeping accounts secure and preventing abuse (legitimate interest).
• Sending service-related e-mails: verification, password reset, scan-finished notification.
• Answering support requests, checking the quality of the service and reviewing the errors you report (e.g. "Is this finding wrong?" reports): for these purposes our authorized staff can view your scan reports read-only. Every view is logged together with the authorized person who viewed it and the time (legitimate interest).

3.1 Access to your reports

Your scan reports are private to your account. Only our authorized staff can view them, solely for support, quality control and reviewing error reports; this access is read-only and recorded in the admin log. Your reports are not shared with third parties.

4. Transfers

Your data is not sold. To provide the service it may be transferred to the following service providers: the payment infrastructure (Paddle), e-mail delivery (Resend), and the hosting and database provider (Hetzner, Germany). Some of these providers have servers outside Türkiye; data is transferred only to the extent needed to provide the service.

5. Retention

Account data is kept for as long as your account is open. You can delete your sites and scans from the panel. To delete your account, you can write to us. Order records that we are legally required to keep are retained for the required period.

6. Sites we scan

Our crawler identifies itself as "AlatliSEO", obeys robots.txt rules and sends requests to the site at a polite rate. Verifying site ownership is not mandatory; unverified sites get a lower speed and page limit, and site owners can block scanning using the methods on the bot page.

7. Your rights

Under Article 11 of KVKK you have the right to learn whether your data is processed, to request correction or deletion, to object to processing, and to claim compensation if you suffer damage. You can send your requests to ozan@alatli.dev.

8. Cookies

We use only one cookie that is necessary to keep your session going, plus a browser record that stores your theme preference. No advertising or tracking cookies are used.