KolayXport Privacy Policy

Last Updated: May 7, 2025

This Privacy Policy explains how Tamsar Tekstil Dış Tic. Ltd. Şti. ("Company", "we", "us", or "our") collects, uses, discloses, and protects your personal data when you use the KolayXportapplication ("Application") and the https://kolayxport.com website ("Site"). Please read this policy carefully. By using our Services, you agree to the practices described in this Privacy Policy.

1. Data Controller

In accordance with Turkey's Law on the Protection of Personal Data No. 6698 ("KVKK"), the data controller for your personal data is Tamsar Tekstil Dış Tic. Ltd. Şti., a company established in Turkey.

2. Personal Data We Collect

We may collect the following personal data from you:

Identity and Contact Information: Your name, surname, and email address when you sign in with your Google account.
Google Account Data (with OAuth Permissions):
- openid, https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/userinfo.profile: To authenticate you and retrieve basic profile information (name, email, profile picture).
- https://www.googleapis.com/auth/spreadsheets: To read and write data to the specific Google Sheet you designate for the Application to function. This is the primary sheet where your orders and related data are stored and processed.
- https://www.googleapis.com/auth/drive.file: To access, manage, and save specific files that the Application creates or that you authorize it to access (e.g., generated shipping labels) into a specific Google Drive folder. We do not request access to your entire Drive.
- https://www.googleapis.com/auth/script.projects, script.scriptapp, script.external_request, script.storage: To run our backend scripts via the Google Apps Script Execution API to perform automation tasks such as order synchronization and label generation. This enables the core functionalities of the Application.
Usage Data: Information about how you use our Application and Site (e.g., access times, pages viewed).
Other Stored Data: We store certain identifiers in our database, such as your Google Sheet ID, Google Drive Folder ID, and any third-party API keys (e.g., shipping carrier API keys) you provide to configure the Application settings. These keys are stored encrypted.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

To provide, maintain, and improve our Services.
To authenticate you with your Google account.
To synchronize order data with your designated Google Sheet.
To create and manage shipping labels in your Google Drive.
To respond to your requests and provide support. Contact: kolayxport@gmail.com.
To comply with legal obligations.

4. Legal Basis for Processing Personal Data

We process your personal data based on the following legal grounds under KVKK Article 5:

Processing is necessary for the establishment or performance of a contract to which you are a party.
Processing is necessary for compliance with a legal obligation to which the data controller is subject.
Processing is necessary for the legitimate interests pursued by the data controller, provided that such processing does not harm your fundamental rights and freedoms.
Your explicit consent (which will be sought separately for specific situations).

5. Sharing of Personal Data

We do not share your personal data with third parties, except in the following circumstances:

With Google (via OAuth and API services, with your consent).
If required by law or upon request from public authorities.
With trusted service providers who assist us in delivering our Services (e.g., database hosting), but only if they comply with this policy and confidentiality obligations.

6. Data Retention and Security

We retain your personal data for as long as necessary for the purposes for which it was collected or as required by law. We take appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Sensitive data such as API keys are stored encrypted in our database.

7. Your Rights Under KVKK

Under KVKK Article 11, you have the following rights:

To learn whether your personal data is processed.
To request information if your personal data has been processed.
To learn the purpose of processing your personal data and whether they are used appropriately for their purpose.
To know the third parties to whom your personal data is transferred domestically or abroad.
To request correction of your personal data if it is incomplete or incorrectly processed.
To request the deletion or destruction of your personal data under the conditions stipulated in KVKK Article 7.
To request notification of the operations carried out pursuant to sub-paragraphs (d) and (e) to third parties to whom your personal data has been transferred.
To object to the occurrence of a result against you by analyzing your processed data exclusively through automated systems.
To claim compensation for damages arising from the unlawful processing of your personal data.

You can exercise these rights by contacting us at kolayxport@gmail.com.

8. Cookies

Our Site may use cookies to enhance user experience. You can refuse cookies through your browser settings, but this may cause some functions of the Site to not operate properly.

9. Links to Other Websites

Our Site may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on the Site. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:
Tamsar Tekstil Dış Tic. Ltd. Şti.
Email: kolayxport@gmail.com