Note on this English translation

This English version is provided for information purposes only. It is a courtesy translation of the Turkish original. In the event of any discrepancy or conflict of interpretation, the Turkish version of this document shall prevail.

1. Introduction

This Privacy Policy has been prepared to explain how personal data collected through the signlogger.com website and the SignLogger services operated by Sysnet Yazılım ve Bilgi Teknolojileri Ltd. Şti. ("Sysnet") is processed, protected and transferred.

Our Policy complies with Law No. 6698 on the Protection of Personal Data ("KVKK"), Law No. 6563 on the Regulation of Electronic Commerce, Law No. 5651 on the Regulation of Publications on the Internet, and all related secondary legislation.

2. Information We Collect

When you visit our website, use our services or contact us, we may collect the following information:

Information provided directly by you: first name, surname, e-mail, telephone, company name, message content, demo request, download request, dealership application.
Account information: username, password hash, role, two-factor authentication records.
Automatically collected information: IP address, browser type/version, operating system, date/time of visit, pages visited, referring URL, cookie data, session ID.
Download requests: token records, IP, usage counter (valid for 2 hours, then automatically purged).
Server logs: access and error records (retained for 90 days).

3. Purposes of Use of the Information

We process the information we collect solely for the following purposes:

To provide our services and to send demo links and download links;
To fulfil our contractual obligations;
To provide technical support and customer service;
To improve service quality and to remedy errors;
To prevent misuse, fraud and cyberattacks;
To fulfil our legal obligations;
Where you have consented, to inform you about our products and services.

4. Cookies and Similar Technologies

Our website uses cookies of the following categories and durations to improve your experience:

You can change your cookie preferences via the cookie management panel at the bottom of our site or through your browser settings. If you disable mandatory cookies, some functions of the site may not work.

Mandatory cookies: session ID, CSRF token (session duration).
Functional cookies: your cookie preference, theme/language settings (30 days – 1 year).
Analytics cookies: anonymous site usage statistics — collected with explicit consent (13 months).
Marketing cookies: remarketing — collected with explicit consent (90 days).

5. Third-Party Services

We use the following third-party services; the respective privacy policies of these providers apply:

Microsoft 365 (e-mail delivery) — privacy.microsoft.com
Cloudflare (CDN, DDoS protection) — cloudflare.com/privacypolicy
Google Fonts (typefaces) — policies.google.com/privacy
Google Maps (dealer locations, embed) — policies.google.com/privacy
Google Analytics (anonymous analytics, with explicit consent) — policies.google.com/privacy

6. Sharing of Information

We share your information only in the following cases:

Your information is under no circumstances sold or transferred to third parties for marketing purposes.

Upon the lawful requests of authorized public institutions and organizations;
Our infrastructure providers bound by written contract (hosting, e-mail service);
In the event of your dealership application, the relevant dealership unit for the provision of local service;
If you are a customer of a dealer, the relevant dealer for the purpose of maintaining the service;
Pursuant to a court order or a request from the public prosecutor's office;
Where necessary to protect our rights and interests.

7. Data Security

We apply industry-standard technical and administrative measures to protect your information:

TLS 1.2+ encryption, HSTS (HTTP Strict Transport Security), modern cipher suites;
Passwords are hashed with bcrypt (cost 12);
Two-factor authentication (TOTP/2FA) on administrator panels;
Role-based access control (RBAC) and audit logging;
Regular security scans and penetration tests;
Brute-force attack protection with fail2ban;
Encrypted daily backups and disaster recovery plans.

8. Data Retention Periods

Account information: until you delete your account or it remains inactive for 3 years.
Download request records: automatically deleted after 24 hours.
Contact form messages: 2 years.
Invoices and contracts: 10 years (Turkish Commercial Code, Art. 82).
Server logs: 90 days.
Law No. 5651 traffic data: 6 months – 2 years.
Cookie data: for the lifetime of the cookie.

9. Transfer Abroad

Our cloud-based services (e-mail, CDN, analytics) may involve the transfer of data abroad depending on the server locations of the providers. Pursuant to KVKK Art. 9, we work with countries that provide adequate protection or with data controllers that undertake to provide adequate protection.

10. Children's Privacy

Our services are not directed at persons under the age of 18. We do not knowingly collect information from a person under the age of 18. If you become aware of such a situation, please contact us immediately.

11. Your Rights

All your rights under KVKK Art. 11 (to be informed, to have data corrected or deleted, to object, to claim compensation, etc.) are reserved. For detailed information, please review our KVKK Disclosure Statement.

12. Changes to the Policy

This Policy is updated as necessary. Material changes are announced on our website or by e-mail at least 15 days in advance. The current version is in effect as of the date shown at the top of the page.

13. Contact

Privacy inquiries: kvkk@sysnet.com.tr
General contact: info@sysnet.com.tr
Address: Sysnet Yazılım ve Bilgi Teknolojileri Ltd. Şti., İstanbul / Türkiye
Web: https://signlogger.com/contact