Privacy Policy

Sayımcı is operated by Oğuzhan Bozkurt, a sole trader based in İstanbul, Turkey, who is the data controller for the personal data described here under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK").

Contact: info@sayimci.com

• We do not sell your data or use it for advertising.
• We do not use advertising, tracking or analytics cookies.
• Each business sees only its own data.
• You can download your data to Excel and close your account at any time.

• Identity: first and last name.
• Contact: e-mail address.
• Customer transaction: business name, line of business, waiting-list answers, plan and subscription details, support correspondence.
• Security: IP address, browser and device information, session and access logs.
• Billing: invoice details and payment status. Card details are processed by our payment provider; Sayımcı never sees or stores them.

Product, stock, location and supplier records you enter, and any personal data in them (for example a supplier contact's name and e-mail address, or the e-mail addresses of team members you invite), are processed on behalf of the business that uses the account.

For that data the business using the account is the data controller. Sayımcı processes it as a data processor, only on the business's instructions and only to provide the service.

• To open your account and provide and maintain the service: stock tracking, the morning digest e-mail, sending supplier orders.
• To run the 14-day trial and subscriptions, and to track payments and invoices.
• To record your place on the waiting list and tell you when the service launches.
• To answer support requests.
• To keep information secure and prevent misuse and unauthorised access.
• To meet legal obligations and respond to requests from competent authorities.

We rely on the legal grounds in Article 5(2) of the KVKK: performance of a contract (account, service, trial, subscription, waiting list, support), compliance with a legal obligation (keeping invoices and records, official requests), establishing, exercising or defending a right (possible disputes), and legitimate interest where it does not harm your fundamental rights (information security, preventing misuse, improving the service).

Promotional e-mail is sent only if you have separately agreed to it.

Electronically: through the forms on the website and in the application, through e-mail correspondence, and through server and access logs created automatically while you use the service.

Within Turkey, personal data may be shared with competent public authorities when the law requires it and they ask for it.

The service runs on infrastructure provided by companies based outside Turkey. Personal data is transferred to the following providers only to the extent needed to provide the service:

Because the Turkish Personal Data Protection Board has not issued an adequacy decision for any country, these transfers are based on your explicit consent under Article 9 of the KVKK. You give this consent when joining the waiting list and when signing in. As the whole service runs on infrastructure abroad, it cannot be provided without that consent.

You can withdraw your consent at any time by writing to info@sayimci.com. Your account is then closed and your data is deleted under the retention rules below; withdrawal does not affect transfers made before it.

We keep personal data only as long as its purpose requires.

• When you close your account, account and application data is deleted within 30 days.
• A waiting-list entry is deleted when you ask to leave the list, or at the latest one year after the service launches.
• Records we are legally required to keep, such as invoice records, are kept for the period set by the relevant legislation.

• The connection between you and the website and application is encrypted with HTTPS.
• Data is stored on servers in Germany (Frankfurt), on disks encrypted by the provider.
• Row-level access rules are enforced in the database; one business's records are never shown to another.
• Access to data is limited to the people needed to run the service.
• Card details are processed by the payment provider and never reach Sayımcı's servers.

Sayımcı uses only entries that the service needs to work or that remember a choice you made. Under the Turkish data protection authority's cookie guidance these do not require consent; this section tells you about them.

Preference entries are written only when you make a choice, stay in your browser and are not sent to our servers.

We count how often each page is opened with Vercel Web Analytics. It uses no cookies or browser storage, creates no identifier for you, and only shows aggregate numbers.

Bot protection is provided by Cloudflare Turnstile; during that check Cloudflare processes your IP address and browser information. If we ever start using analytics, advertising or marketing cookies, we will ask for your explicit consent before using them.

You can delete cookies and browser storage in your browser settings. Deleting the session cookie signs you out of the application.

Service e-mails are sent to keep your account working: the morning digest, supplier orders, team invitations, subscription and invoice notices. You can turn off the morning digest in the application settings.

Promotional e-mail is not sent unless you have separately agreed to it. If you have, you can withdraw at any time through the link in each e-mail or by writing to us.

Sayımcı is a service for businesses. People under 18 may not open an account.

Under Article 11 of the KVKK you have the right to:

• learn whether your personal data is processed and, if so, request information about it;
• learn the purpose of processing and whether data is used for that purpose;
• know the third parties, in Turkey or abroad, to whom data is transferred;
• ask for incomplete or inaccurate data to be corrected;
• ask for data to be deleted or destroyed under the conditions of Article 7 of the KVKK;
• ask for corrections, deletions and destructions to be notified to the third parties who received the data;
• object to a result against you that arises solely from automated analysis of your data;
• claim compensation if you suffer damage from unlawful processing.

Send requests to info@sayimci.com from the e-mail address registered with us, with information that verifies your identity, or with a secure electronic signature. We answer within 30 days, free of charge; if a request involves an additional cost, the fee set by the Personal Data Protection Board may be charged.

When we make a material change to this policy, we announce it on this page and by e-mail to the address registered on your account.

For privacy questions and requests under the KVKK, write to info@sayimci.com.