Privacy Policy
Your privacy is our priority. This policy explains how we collect, use, and protect your personal data in compliance with GDPR and KVKK (Turkish Data Protection Law No. 6698).
Last Updated:
1. Data Controller
Under GDPR and KVKK, the data controller is the entity that determines the purposes and means of processing personal data.
Data Controller Information
- Legal Entity:
- Aligntr Teknoloji Anonim Şirketi (Aligntr Technology Inc.)
- Address:
- For current address, contact legal@align.tr
- Contact Email:
- legal@align.tr
- Website:
- https://align.tr
2. Personal Data We Process
To provide our Digital Worker platform services, we process the following categories of personal data:
Identity Information
- First name, last name
- Email address
- Phone number (optional)
- Company information (company name, tax ID)
Security Data
- IP address
- Browser information
- Device information
- Session logs
- Cookies
Usage Data
- Digital Worker creation and usage logs
- Platform activity logs
- Integration settings
- Language model preferences
Financial Data
- Payment information (processed by Stripe, not stored by us)
- Billing information
- Subscription status
Communication Data
- Support requests and responses
- Feedback
- Email communication records
3. Processing Purposes
We process your personal data for the following purposes:
- Service Delivery: Providing core Digital Worker platform functionality and managing your account
- Security and Authentication: Identity verification, preventing unauthorized access, ensuring system security
- Payment Processing: Processing subscription payments and issuing invoices
- Customer Support: Providing technical support and resolving issues
- Service Improvement: Analyzing platform performance and improving user experience
- Legal Compliance: Meeting obligations under KVKK, tax, and commercial laws
- Communication: Sending important updates, maintenance notifications, and service announcements
4. Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR Article 6 and KVKK Article 5:
- Consent: Your explicit consent for platform usage
- Contract: Processing necessary to fulfill our service agreement
- Legal Obligation: Compliance with tax, commercial, and other legal requirements
- Legitimate Interest: Service security, system integrity, and fraud prevention
5. Data Retention Periods
We retain your personal data for as long as necessary to fulfill the processing purposes and meet legal retention requirements:
| Data Category | Retention Period |
|---|---|
| Account information | Duration of active account + 1 year |
| Invoice and payment records | Legal retention period (10 years) |
| Platform usage logs | 12 months |
| Security logs | 24 months |
| Support requests | 3 years |
| Marketing consent (after withdrawal) | Immediately deleted |
6. Third Party Data Sharing
We may share your personal data with the following third parties to the extent necessary for service delivery:
Cloud Service Providers
- Microsoft Azure: Data hosting, database, cache, language model services
- Azure Communication Services: Email delivery
All data is stored in Azure West Europe region (within EU borders)
Payment Processor
- Stripe: Payment card information is processed directly by Stripe and never stored on our servers
Analytics and Monitoring
- Azure Application Insights: Performance monitoring and error reporting
Legal Requirements
In case of legal obligation, court order, or official authority request, we may share your data with competent authorities.
Important Note:
All our third-party service providers have signed GDPR and KVKK compliant data processing agreements. We never sell or rent your data to third parties for marketing purposes.
7. Your Data Protection Rights
Under GDPR Article 15-22 and KVKK Article 11, you have the following rights regarding your personal data:
Right to Information
Learn whether your personal data is being processed and request information about the processing
Right of Access
Request access to your processed personal data
Right to Rectification
Request correction of inaccurate or incomplete personal data
Right to Erasure
Request deletion of your personal data (subject to legal retention obligations)
Right to Object
Object to the processing of your personal data (e.g., stop marketing communications)
Right to Data Portability
Request your personal data in a structured, commonly used, and machine-readable format
How to Exercise Your Rights
You can submit your data protection requests via:
- Email: privacy@align.tr
- Written Application: For current address, contact legal@align.tr
- In-Platform: Account Settings → Privacy → Data Rights section
Your requests will be responded to within 30 days free of charge. If the request requires additional costs, we may charge a fee as determined by the Turkish Personal Data Protection Authority.
8. Data Security
We implement industry-standard technical and administrative measures to ensure the security of your personal data:
- TLS/SSL encryption for data transmission
- Database encryption at rest
- Regular security testing and vulnerability scans
- Access control and authorization systems
- Security event monitoring and logging
- Regular backups and disaster recovery plans
- Employee security training and confidentiality commitments
9. Cookies
Our platform uses cookies to improve user experience and deliver services:
Essential Cookies
Required for platform functionality (session management, security). These cookies cannot be disabled.
Performance Cookies
Used to analyze and improve platform performance. These are optional.
You can manage your cookie preferences in platform settings.
10. Children's Privacy
Our platform is not designed for individuals under 18 years of age. We do not knowingly collect personal data from individuals under 18. If you become aware that a user under 18 has provided data, please contact us.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When significant changes occur, you will be notified via the platform and email. The change date can be tracked from the "Last Updated" date at the top of this page.
If you do not accept the updated policy, you have the right to close your account.
12. Contact Us
For questions about this Privacy Policy or requests regarding your personal data:
- Privacy Requests:
- privacy@align.tr
- Legal Inquiries:
- legal@align.tr
- Customer Support:
- support@align.tr
Complaint to Supervisory Authorities
If you believe your data protection rights have been violated, you may lodge a complaint with:
- Turkish Personal Data Protection Authority: www.kvkk.gov.tr
- EU Data Protection Authorities: Your local supervisory authority