Privacy Policy | Müşavir

This Privacy Policy explains how Müşavir Teknoloji ve Yazılım A.Ş. (“Müşavir”, “we”) collects, uses, shares and protects personal data when you visit musavir.co or use the Müşavir application. We act as the data controller for our own website and account data, and as a data processor for the business data our customers store in the application.

1. Data we collect

Account data

Name, e-mail address, phone number, the company you belong to and your role. This is required to create an account, authenticate you and apply permissions.

Customer content

Data you enter into the application; customers, quotes, invoices, accounting records, personnel records, files and messages. You decide what goes in; we process it on your instructions to provide the service.

Technical data

IP address, browser and device information, pages visited and error diagnostics. We use this to keep the service available, investigate faults and prevent abuse.

Communications

Messages you send us by e-mail, phone or the contact page, and our replies.

2. Why we process it and on what legal basis

To provide the service: performance of a contract with you or your company.
To secure the service: our legitimate interest in preventing unauthorised access and abuse.
To meet legal obligations: accounting, tax and record-keeping duties under Turkish law.
To contact you about your request: your consent or our pre-contractual steps.

3. Sign-in with Google

If you sign in with Google, we receive your name, e-mail address and profile picture from Google to create and identify your account. We do not receive your Google password, and we do not request access to your Gmail, Drive or contacts. You can disconnect the Google connection at any time from your Google Account security settings; your Müşavir account remains and you can continue signing in by e-mail.

4. Service providers

We share data only with providers that help us run the service:

Hosting: our own servers in Germany (EU). Databases, files and backups stay on this infrastructure.
E-mail delivery: for transactional e-mail such as sign-in links and notifications.
SMS delivery: for one-time codes and notifications where you enable them.
Error monitoring: to diagnose faults; reports are limited to technical context.
Network and security: a content delivery and protection layer in front of our servers.

Where your company connects its own accounts (e-mail, SMS, e-signature, payment, accounting), those providers receive data under your own agreement with them. We store the credentials you supply encrypted and never return them to the browser.

5. International transfers

Our primary infrastructure is in the European Union. Where a provider processes data outside Türkiye, we rely on the transfer mechanisms permitted under the Turkish Personal Data Protection Law (KVKK) and, where the GDPR applies, on standard contractual clauses.

6. Retention

Account data is kept while your account is active. Customer content is kept while your company’s subscription is active and deleted or returned on request afterwards, unless a statutory retention period (for example accounting records) requires us to keep it longer. Backups are rotated on a schedule and deleted data disappears from them as they age out. Technical logs are retained for a limited period for security and troubleshooting.

7. Security

Access is scoped per company and per module, and enforced in the database as well as in the application. Credentials for third-party services are encrypted with AES-256-GCM. Traffic is served over TLS. Backups are taken on a schedule and restores are tested.

8. Your rights

Under the KVKK (Article 11) and, where applicable, the GDPR, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to processing, and data portability. Write to [email protected] and we will respond within the statutory period. If your data was entered by a company using Müşavir, we will direct your request to that company as the controller.

9. Cookies

We use the minimum cookies needed to keep you signed in and to keep the site working. See our Cookie Policy for the full list.

10. Changes

We update this policy when the service changes. Material changes are announced in the application or by e-mail before they take effect.

11. Contact

Müşavir Teknoloji ve Yazılım A.Ş. · [email protected] · [email protected]