KVKK notice

Data controller

The data controller is MSECAMP LLC, 12 Daniel Road Suite 318-333, Fairfield, NJ 07004, USA. Email: [email protected].

This notice covers account owners, workspace members and website visitors.

Data we process

We process these categories of personal data:

• Identity: name.
• Contact: email address.
• Customer transactions: plan and subscription details, connected social accounts, posts, automations, inbox records and statistics.
• Financial: subscription and payment records and X balance activity. Stripe collects card and billing details directly; we never store card numbers.
• Transaction security: IP address, session records, API key and access grant records.

Why we process it

We process this data to:

• Open your account and provide the service.
• Run your social account connections, publishing and automations.
• Handle subscriptions, payments and accounting.
• Keep information secure and prevent abuse.
• Send you service notices and respond to your requests.

How we collect it and legal grounds

We collect data electronically through our website, app, MCP server and API, with payment data coming through Stripe and social account data through Zernio.

We rely on these grounds under Article 5 of the law:

• It is necessary to enter into or perform a contract (Art. 5/2-c).
• It is necessary to comply with our legal obligations (Art. 5/2-ç).
• It is necessary to establish, exercise or defend a right (Art. 5/2-e).
• It is necessary for our legitimate interests, provided it does not harm your fundamental rights and freedoms (Art. 5/2-f).

Transfers

We share data, only as far as the service requires, with Zernio (social media connection infrastructure); Stripe, which sells the subscription as our reseller and receives card and billing details directly; our hosting provider; our email delivery provider; Google, if you choose to sign in with Google; and the social media platforms that your content and messages go to on your instructions. We disclose data to public authorities when the law requires it.

Because the data controller and its providers are located outside Turkey, data is transferred abroad. These transfers follow the procedures set out in Article 9 of the law.

Followers' data

For people who comment on or message social accounts connected to postevi, the account owner is the data controller. We process that data on the owner's instructions as a data processor.

These people should exercise their rights with the account owner first. Any requests that reach us are forwarded to the owner.

Your rights

Under Article 11 of the law, you can apply to the data controller to:

• Find out whether your personal data is being processed.
• Request information about that processing.
• Learn why it is processed and whether it is used for that purpose.
• Know the third parties in Turkey or abroad that receive it.
• Have incomplete or inaccurate data corrected.
• Have it deleted or destroyed when the conditions in Article 7 are met, and have that correction or deletion passed on to the third parties who received it.
• Object to an outcome against you that results solely from automated analysis.
• Claim compensation if you suffer damage from unlawful processing.

How to apply

Send your request in writing to [email protected], in line with the Communiqué on the Procedures and Principles for Applications to the Data Controller. Include your name, contact details and what you are asking for. Writing from the email address registered to your account is enough to verify your identity.

We answer requests free of charge within 30 days. If you are not satisfied with our answer, you can file a complaint with the Turkish Personal Data Protection Board.