Privacy Policy
Last updated: · Version: 2026-09-11
This English version is provided for information only. The agreement is governed by Turkish law and the Turkish text prevails in case of any discrepancy.
1. Introduction and Our Roles
At YouReply Teknoloji Ticaret Eğitim Danışmanlık Araştırma Organizasyon A.Ş. ("YouReply", "the Company", "we") we take the privacy of your personal data seriously. This Privacy Policy explains how your personal data is collected, used, stored and protected when you use the YouReply Analyze platform (the "Platform").
This policy has been prepared under Turkish Personal Data Protection Law no. 6698 (KVKK) and related legislation.
Two distinct roles apply. For your account information and Platform usage data, we are the data controller. For the survey and research data you open on the Platform for analysis (which may belong to your own participants), you are the data controller and we act only as a processor. It is your responsibility to ensure that such data was collected lawfully and that you have a legal basis for having it analysed.
2. Personal Data Collected
2.1 Account information
The following information is collected when you register:
- Name and surname
- E-mail address
- Phone number
- Company/organisation name
- Billing details
2.2 Usage data
- IP address and browser information
- Date and time of access
- Pages visited and links clicked
- Activity history on the Platform
- Device and operating system information
- The time of each analysis run and the name of the method run, used to calculate your monthly allowance (the analysed data is not part of this record)
2.3 Analysed data
The files you choose to analyse (CSV, Excel) are opened in your browser. So that you can continue your work on the same device, a working copy of the file, your variable settings and your analysis history are kept in your browser's local storage (IndexedDB) under a key specific to your account. When you run an analysis, only the data needed for that analysis is sent over an encrypted connection (HTTPS) to the analysis engine on our servers, and the result is returned to your browser. Analysis files and results are not saved to a database on our servers against your account.
Survey data may carry personal data belonging to participants (age, gender, institution, open-ended responses); responsibility for it rests with you, as set out in §1. No identifying information is required for analysis; we recommend removing directly identifying columns before opening your data for analysis.
2.4 Data processing inventory
The table below shows which category of data is processed for which purpose, on which legal basis, and with whom it is shared. Files opened for analysis are assessed in separate rows from account, contact and payment data.
| Data category | Examples | Purpose of processing | Legal basis (KVKK art. 5) | Collection method | Recipients | Retention |
|---|---|---|---|---|---|---|
| Identity and contact | Name and surname, e-mail address | Creating the account, managing sessions, providing the service | Formation and performance of the contract | Registration form | Hosting infrastructure; e-mail infrastructure provider for transactional e-mails | While the account is open; deleted when the account is deleted |
| Contact form messages | Name, e-mail, phone (optional), subject, message content | Answering the request | Legitimate interest (responding to the request) | Web form | E-mail infrastructure provider (processor) | Not saved to the site's database; kept in the corporate mailboxes the message reaches for as long as the purpose of processing requires |
| Files opened for analysis | CSV / Excel files and the variables they contain | Carrying out the statistical analysis | The legal basis you rely on as data controller (we are the processor) | File selection in the browser; sent to the engine when an analysis runs | Not shared with third parties; not sent to any language model | Not saved to a database on the server; the working copy in your browser stays on your device until you delete it |
| Analysis results | Test output, tables, analysis history | Presenting the results to the user | Performance of the contract | Produced by the analysis engine | Not shared with third parties | Not saved to a database on the server; stays in your browser until you delete it |
| Usage record | Time of the analysis run, account, user, method name | Calculating the monthly analysis-run allowance | Performance of the contract | Automatically by the system | Hosting infrastructure | For as long as the purpose of processing requires |
| Billing and payment | Order record, billing details, payment reference | Collecting payment, issuing the invoice | Performance of the contract and legal obligation | Purchase flow | Payment institution (iyzico), accounting and bookkeeping processes | For the statutory retention period |
| Card details | Card number and security code | Collecting the payment | Performance of the contract | The payment institution's page | Only the payment institution; card data is not stored on our systems | Not stored by us |
| Transaction and security logs | IP address, time of transaction, error logs | Ensuring security, fixing errors | Legitimate interest and legal obligation | Automatically by the system | Hosting infrastructure | For the statutory minimum period |
| Database backups | Backups of account, usage and billing records | Protection against data loss | Legitimate interest (business continuity) | Automatic backup | The Company's own backup infrastructure | Deleted after 90 days |
| Cookie and usage data | Language preference, cookie preference | Remembering the preference | Legitimate interest | Browser | Not shared | The periods in the Cookie Policy |
When deletion is requested, the data is permanently deleted from the user account. Copies in database backups disappear no later than when the 90-day backup rotation completes; during that period backups are accessible only for restoration purposes. Because the working copy of your analysis in the browser is not on our servers, you can delete it by clearing your browser's site data.
3. Purposes of Processing
- Account creation and authentication
- Delivering the analysis service
- Improving Platform services
- Providing customer support
- Billing and payment processing
- Meeting legal obligations
- Ensuring Platform security
- Anonymous statistics on service usage (the data you analyse is not used for this purpose)
- Marketing and communication (where you have consented)
4. AI Is Not Used
YouReply Analyze performs statistical computation: t-tests, ANOVA, correlation, regression and comparable methods run on standard open-source libraries (SciPy, statsmodels, scikit-learn, semopy, NumPy, pandas). Analysis files uploaded to YouReply Analyze are not sent to any language model and are not shared with any third-party artificial intelligence service. International transfers are explained separately for each category of data in section 6.
If you are looking for text analysis (reviews, open-ended responses, feedback), YouReply Intelligence is a separate product where language models are used; that product's privacy policy explains the flow separately.
5. Sharing of Data and Processors
Your personal data is not sold and is not shared with third parties for marketing purposes. To provide the service, the following service providers may process personal data on our behalf and under our instructions as processors:
- Hosting infrastructure: account, usage and billing records, and the data processed during an analysis
- E-mail infrastructure provider (Amazon Web Services, Amazon SES): contact form messages and transactional e-mails
- Payment institution (iyzico): card payments
Beyond these, personal data is shared only in response to legal requests and court orders or where you have given explicit consent.
6. International Transfers
International transfers are assessed separately for each category of data:
- Analysis files: processed only by the analysis engine on our hosting infrastructure; not transferred to any language model, artificial intelligence or third-party analysis service.
- Contact form and e-mails: contact form messages and transactional e-mails are delivered through the servers of our e-mail infrastructure provider, Amazon Web Services, in the European Union (Frankfurt). This constitutes an international transfer.
- Payment: card details are processed directly on the infrastructure of the payment institution iyzico and are subject to iyzico's own privacy notice.
- Analytics: no analytics measurement is currently used on this site, so no transfer takes place for analytics purposes.
7. Protection of Data
- Data transmission over SSL/TLS encryption
- Access control and account-scoped authorisation
- Regular security reviews
- Backup and disaster recovery plans
8. Cookies
For details on cookie usage, please see our Cookie Policy.
9. Your Rights (under KVKK)
Under Article 11 of KVKK you have the right to:
- Learn whether your personal data is being processed
- Request information if it has been processed
- Learn the purpose of processing and whether it is used accordingly
- Know the third parties to whom it is transferred, domestically or abroad
- Request correction if it is incomplete or inaccurate
- Request erasure or destruction under Article 7 of KVKK
- Object to an adverse outcome arising from analysis carried out solely by automated systems
- Claim compensation for damages arising from unlawful processing
10. Retention Period
Your personal data is retained for as long as the purpose of processing requires and within statutory retention obligations. Analysis files and results are not saved to a database on our servers; the working copy in your browser stays on your device until you delete it. If you close your account, your personal data is deleted or anonymised, subject to statutory retention periods; copies in database backups are deleted within 90 days.
11. Changes
We may update this policy from time to time. Changes are published on this page and you will be notified by e-mail of significant changes.
12. Contact
For questions about our privacy policy, contact us at kvkk@youreply.com.tr.
Data controller: YouReply Teknoloji Ticaret Eğitim Danışmanlık Araştırma Organizasyon A.Ş.
Address: Hacettepe Üniversitesi Teknoloji Geliştirme Bölgesi, Beytepe Kampüsü, 6. Ar-Ge Binası C Blok, Çankaya / Ankara