Privacy Policy

1. Data Controller

Pursuant to the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the GDPR, your personal data is processed by Stayivo ("the Company") as the data controller within the scope described below.

2. Personal Data We Collect

• Identity and contact details: full name, email address, phone number, hotel/company name.
• Request details: project information you share in quote and demo request forms.
• Transaction records relating to purchases and payments. Your card details are never stored on our systems; payments are processed on PayTR's PCI-DSS compliant infrastructure.
• Technical data: IP address, browser type, device information and site usage records.

3. Purposes and Legal Basis

Your personal data is processed on the legal grounds set out in Articles 5 and 6 of the KVKK in order to respond to quote and demo requests, carry out sales and contract processes, install and support our services, fulfil legal obligations and ensure the security of our website.

4. Cookies

We use strictly necessary and functional cookies for session continuity, remembering your language preference and usage statistics. You can delete or block cookies at any time via your browser settings.

5. Data Transfers

Your data may be transferred — in accordance with Articles 8 and 9 of the KVKK — to PayTR Ödeme Hizmetleri A.Ş. for payment processing, to our hosting and email service providers, and to authorized institutions where legally required. Your data is never sold or rented to third parties for marketing purposes without your explicit consent.

6. Retention

Personal data is retained for as long as required by the processing purposes and the statutory retention periods; afterwards it is deleted, destroyed or anonymized.

7. Data Security

Our website is encrypted with a 256-bit SSL certificate. Up-to-date technical and administrative measures are applied to prevent unauthorized access to your data.

8. Your Rights

Under Article 11 of the KVKK you have the right to learn whether your data is processed, to request its correction or deletion, to know the third parties to whom it is transferred and to object to processing. You may submit your requests via our contact form; applications are answered within 30 days at the latest.

9. Changes

This policy may be updated when necessary. The current version is always published on this page and takes effect on the date of publication.