Privacy Policy

Last updated: March 2025

This Privacy Policy explains how EDirect ("we", "us", "our") collects, uses, and protects your personal data when you use our digital menu platform. We are committed to protecting your privacy in accordance with the Turkish Personal Data Protection Law (KVKK) and applicable EU regulations (GDPR where relevant).

1. Data We Collect

We collect the following categories of data:

  • Account data: name, email address, password (hashed), and venue information provided during registration.
  • Payment data: billing details and transaction records processed through iyzico. We do not store full card numbers — payment processing is handled securely by iyzico.
  • Usage data: pages visited, features used, device type, browser, and IP address collected automatically via analytics.
  • Menu data: items, categories, prices, and images you upload to build your digital menu.
  • Customer data (for Pro plan): newsletter subscribers and CRM contacts added by venue owners.

2. How We Use Your Data

  • To provide and operate the EDirect platform
  • To process subscription payments
  • To send service notifications and support communications
  • To improve our services through aggregated usage analytics
  • To comply with legal obligations

3. Data Sharing

We do not sell your personal data. We share data only with:

  • iyzico: our payment processor, for subscription billing.
  • Infrastructure providers: hosting and database services (Vercel, cloud database providers) under data processing agreements.
  • Legal authorities: when required by law.

4. Cookies

We use essential cookies for authentication sessions and optional analytics cookies (Vercel Analytics). By using our platform you consent to essential cookies. Analytics cookies are used in anonymised form only.

5. Data Retention

Account and menu data is retained for as long as your account is active. After account deletion, data is removed within 30 days except where retention is required by law (e.g. payment records retained for 5 years per Turkish financial regulations).

6. Your Rights

Under KVKK, you have the right to:

  • Learn whether your personal data is being processed
  • Request information about how your data is processed
  • Access your personal data
  • Request correction of incomplete or inaccurate data
  • Request deletion or destruction of your data
  • Object to processing of your data
  • Request compensation for damages arising from unlawful processing

To exercise these rights, contact us at support@syllanthro.com.

7. Security

All data is transmitted over HTTPS/TLS. Passwords are hashed and never stored in plain text. Payment data is handled exclusively by iyzico and never stored on our servers.

8. Contact

For privacy-related requests or questions, contact us at support@syllanthro.com.