Privacy Policy

1. Introduction

Welcome to FeedSense. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our feedback management platform.

FeedSense is operated by Mahir Can Yüksel, located in Turkey. We are committed to protecting your privacy and complying with applicable data protection laws, including the Turkish Personal Data Protection Law (KVKK - Kişisel Verilerin Korunması Kanunu).

By using FeedSense, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us:

• Account Information: Email address, name, password
• Company Information: Company name, website domain
• Payment Information: Processed securely by Paddle.com (we do not store credit card details)
• Feedback Data: User feedback submitted through your widget
• Communications: Messages you send us via email or support

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent
• Device Information: Browser type, IP address, operating system
• Cookies: See our Cookie Policy below

2.3 Third-Party Data

We may receive information from third-party services you connect to FeedSense (e.g., Slack integration).

3. How We Use Your Information

We use the collected information for:

• Service Provision: Operating and maintaining FeedSense
• Account Management: Creating and managing your account
• Payment Processing: Billing and subscription management
• Analytics: AI-powered feedback analysis and insights
• Communication: Sending updates, notifications, and support messages
• Improvement: Enhancing our platform and developing new features
• Security: Detecting and preventing fraud, abuse, and security incidents
• Legal Compliance: Meeting legal obligations under Turkish law

4. Legal Basis for Processing (KVKK Compliance)

Under KVKK, we process your personal data based on:

• Explicit Consent: For marketing communications and optional features
• Contract Performance: To provide the services you subscribed to
• Legitimate Interest: For service improvement and fraud prevention
• Legal Obligation: To comply with Turkish tax and commercial laws

5. How We Share Your Information

We do not sell your personal information. We may share your data with:

5.1 Service Providers

• Railway: Cloud hosting and infrastructure (United States)
• Paddle.com: Payment processing (Ireland, GDPR compliant)
• Resend: Transactional emails (European Union)
• OpenRouter: AI-powered feedback analysis (United States, required for service)
• Mixpanel: Product analytics (United States, optional — requires consent)
• Grafana Faro: Application monitoring (United States, optional — requires consent)

5.2 Legal Requirements

We may disclose information if required by Turkish law, court order, or government request.

5.3 Business Transfers

In case of merger, acquisition, or sale, your information may be transferred to the new entity.

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services
• Comply with legal obligations (Turkish tax law requires 10-year retention for financial records)
• Resolve disputes and enforce agreements

Deletion: You may request account deletion at any time by contacting info@feedsense.co. We will delete your data within 30 days, except where retention is legally required.

7. Your Rights (KVKK)

Under Turkish KVKK, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Deletion: Request deletion of your data
• Objection: Object to data processing for direct marketing
• Data Portability: Receive your data in a structured format
• Withdraw Consent: Revoke consent for processing at any time

To exercise these rights, contact us at info@feedsense.co. We will respond within 30 days as required by KVKK.

8. Data Security

We implement industry-standard security measures:

• Encryption in transit (TLS/SSL) and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your data may be transferred to and processed in countries outside Turkey, including:

• European Union (our payment processor Paddle and email provider Resend)
• United States (cloud infrastructure providers)

We ensure that such transfers comply with KVKK requirements through:

• Standard contractual clauses approved by Turkish authorities
• Adequacy decisions (e.g., EU GDPR)
• Your explicit consent where required

10. Cookies and Tracking

We use cookies for:

• Essential Cookies: Required for authentication and security
• Analytics Cookies: Understanding usage patterns

You can control cookies through your browser settings. Disabling cookies may affect functionality.

11. Children's Privacy

FeedSense is not intended for users under 18. We do not knowingly collect information from children. If you believe we have collected data from a child, contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the platform. Continued use after changes constitutes acceptance.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA).

13.1 Your CCPA Rights

Under CCPA, you have the right to:

• Know: Request information about what personal information we collect, use, and disclose
• Delete: Request deletion of your personal information
• Opt-out: Opt-out of the sale of your personal information
• Non-discrimination: Not be discriminated against for exercising your CCPA rights

13.2 Third-Party Data Sharing

We share your data with the following third parties for business purposes:

13.3 Sale of Personal Information

13.4 Exercising Your CCPA Rights

To exercise your CCPA rights, contact us at info@feedsense.co. We will respond within 45 days as required by CCPA.

14. Contact Us

For privacy-related questions, requests, or complaints:

You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu - KVKK).