KVKK information notice
1. Data controller
Under the Turkish Personal Data Protection Law No. 6698 (KVKK), PinArch is the data controller for personal data in office and customer accounts. For personal data that offices add to their projects, the office concerned is the data controller; PinArch processes that data on the office's behalf.
2. Categories of personal data
Identity (name), contact (email, phone), customer transaction (projects, files, versions, material preferences, comments, revision requests, chat messages, meeting notes, approval records and reconciliation reports), transaction security (session records, password and approval-code hashes, audit records) and, for customer approvals, IP address and browser information. If the office asks in the first form, financial information (budget range).
3. Purposes and legal grounds
Your data is processed on the legal grounds of establishing and performing a contract for account creation, project sharing and service delivery (KVKK Art. 5/2-c), legitimate interest in keeping the service secure and preventing abuse (Art. 5/2-f), compliance with legal obligations (Art. 5/2-ç) and establishing, exercising or protecting a right (Art. 5/2-e).
4. Recipients and transfers abroad
Your data is transferred to service providers such as Supabase, Vercel, Resend, Sentry and, if you sign in with Google, Google in order to deliver the service. As some of these providers are located abroad, transfers are made within the scope of KVKK Art. 9. Project content is shared only with people invited to that project.
5. How personal data is collected
Data is collected electronically from you or from the office that invited you, through registration, sign-in and project forms, and automatically while you use the service (session and security records).
6. Your rights under Article 11 of the KVKK
You have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and whether it is used accordingly, to know the third parties it is transferred to, to request correction if it is incomplete or inaccurate, to request deletion or destruction when the conditions are met, to request that these actions be notified to recipients, to object to a result against you arising from automated analysis, and to claim compensation for damage caused by unlawful processing.
7. How to apply
You can submit your application through the contact page. Applications are concluded free of charge within 30 days at the latest. Applications concerning an office's project are forwarded to that office.