Privacy Policy

1. Introduction

SECAN Bilişim Teknolojileri Limited Şirketi ("SECAN", "we", "us", "our") takes the security of your personal data seriously. This Privacy Policy explains how your personal data is collected, used, and protected when you visit our website and use our services.

2. Information We Collect

When you use our website we may collect the following information:

• Name, surname, and contact details (email address, phone number)
• Project details and messages you share through contact forms
• Website usage information (IP address, browser type, pages visited)
• Technical information collected through cookies

3. Use of Information

The personal data we collect is used for the following purposes:

• Responding to your inquiries and providing customer support
• Improving and personalising our services
• Analysing and improving the performance of our website
• Meeting our legal obligations

4. Sharing of Information

We do not share your personal data with third parties unless required by law or you have given explicit consent. Your data may only be shared with our service providers (hosting, email services) with the necessary security measures in place.

5. WhatsApp Business Assistant Service

SECAN provides a WhatsApp-based AI customer-service assistant for businesses ("Assistant"). Under this service, we process WhatsApp messages from end-users on behalf of our business customers. In the Assistant service SECAN acts as a "data processor" and our business customer acts as the "data controller".

Categories of data processed:

• WhatsApp phone number (E.164 format)
• Name shared in your WhatsApp profile (if available)
• Content of messages you send to the business (text) and timestamps
• Raw event data received from Meta for non-text messages (image, audio, location, etc.)
• Text of replies generated by the Assistant and which AI model produced them

Processing purpose: To produce and deliver AI-assisted replies so that the business can maintain 24/7 customer-service communication with you. Your messages are not used for any purpose other than managing the business's communication with you; they are not used for marketing, are not sold to third parties, and are not used to train AI models.

Sub-processors we use:

• Meta Platforms, Inc. — Message delivery via the WhatsApp Business Cloud API. Meta's WhatsApp Business Policy applies.
• Anthropic, PBC (USA) — Claude AI model for reply generation. Anthropic commits not to use this data for any purpose other than processing the request and not to use it for model training (Anthropic Privacy Policy). Standard Contractual Clauses (SCC) apply for data transfer to the United States.
• Cloudflare, Inc. — Server infrastructure and data storage (D1 database, R2 object storage). Processed in EU/US regions.
• Sendinblue (Brevo) — Email notifications sent to the business owner (only the business owner's email address).

Retention period: Conversation logs are retained for 90 days by default. We honour a different retention period if our business customer requests one. Summarised usage statistics (message counts, costs) are retained for 10 years to meet billing and legal obligations under Turkish law.

Deletion requests: To request deletion of your conversation history, contact the business directly or follow the instructions on our Data Deletion Instructions page. We fulfil requests within 30 days.

6. Data Security

We apply industry-standard security measures to protect your personal data. Your data is transmitted over encrypted connections (SSL) and stored on secure servers.

7. Cookies

Our website uses cookies to improve user experience. You can reject or delete cookies via your browser settings, although some features of the website may not work properly in that case.

8. Your Rights

Under KVKK (Turkish Personal Data Protection Law) and GDPR you have the following rights:

• To learn whether your personal data is being processed
• To request information about your processed personal data
• To request correction or deletion of your personal data
• To object to the processing of your personal data

To exercise these rights, please contact us at inbox@secan.info.

9. Changes

We reserve the right to amend this Privacy Policy from time to time. We will announce significant changes on our website.

10. Contact

For questions about our Privacy Policy you can reach us at: