Data protection disclosure (Law 6698)

Last updated: 21 Feb 2026

The authoritative version of this document is in Turkish. The text below is a translation provided for convenience only.

Terms of Service Privacy notice (KVKK)Privacy policy Cookie policy Delivery & returns Distance sales Explicit consent Data processing (DPA)

1. Data Controller

Pursuant to Law No. 6698 on the Protection of Personal Data (KVKK), your personal data will be processed by X MIND SOLUTIONS YAZILIM VE DANIŞMANLIK ANONİM ŞİRKETİ as the data controller within the scope described below.

Address: Kazlıçeşme Mah. 245. Sk. No: 5 Zeytinburnu / İstanbul
Tax Office / Tax ID: Zeytinburnu Tax Office / 8151183425
Email: [email protected] | KVKK contact: [email protected]

2. Purposes of Processing Personal Data

Creating and managing platform membership

Carrying out subscription and payment transactions (via the PayTR payment infrastructure)

Providing and improving AI-powered services

Responding to customer support requests

Carrying out invoicing and accounting operations

Fulfilling legal obligations

Conducting information security processes

Analysing and improving platform performance

3. Categories of Personal Data Processed

Identity data: First name, surname, tax identification number (for corporate users)

Contact data: Email address, telephone number

Financial data: Billing information, subscription history (credit card details are not stored by our Company; they are processed via the secure PayTR infrastructure)

User transaction data: Platform usage history, preferences, session information

Transaction security data: IP address, browser information, login/logout records

4. Transfer of Personal Data Abroad

KOBIGPT SERVICES OPERATE ON SERVERS LOCATED ABROAD UNDER STANDARD SUBSCRIPTION PLANS. IN THIS SCOPE, YOUR PERSONAL DATA IS TRANSFERRED ABROAD.

Cloud infrastructure: GCP and AWS data centres (USA, EU countries)

Artificial intelligence (LLM): Overseas servers of LLM providers (primarily the USA)

Enterprise plan: A Turkey-located server option is offered under a special agreement

5. Rights of the Data Subject (KVKK Art. 11)

To learn whether your personal data is being processed

To request information if it has been processed

To learn the purpose of processing and whether it is used in line with that purpose

To know the third parties to whom it is transferred domestically or abroad

To request correction if processed incompletely or inaccurately

To request deletion or destruction under KVKK Art. 7

To object to a result against you arising solely from automated analysis

To claim compensation for damage due to unlawful processing

You may submit your requests to [email protected] or in writing to the company address. Requests are concluded within 30 days at the latest.