KVKK Privacy Notice
Last updated: 22 October 2026
This notice is given under Article 10 of Turkey's Personal Data Protection Law No. 6698 ("KVKK") to people who visit webtochat.net, fill in our contact form or use Webtochat services. The Turkish version is the governing text.
1. Data controller
The data controller is AVC LLC, owner of the Webtochat brand. Address: 30 N Gould St Ste 43070, Sheridan, WY 82801, USA. Email: info@webtochat.net, WhatsApp: +90 541 118 25 25.
2. Purposes of processing
- Contact form and proposals: your name, business name, phone number and (if given) website or Instagram account, to contact you, review your business and prepare a tailored proposal. We also review your business's public information (website, Google reviews, social media); reviewers' names are not stored.
- Clients: account creation and sign-in; setting up and running the service; subscriptions, payments and invoicing.
- People chatting with an assistant: receiving messages and generating replies with an AI model; keeping the conversation going during the session; recording which domain a request came from, for security.
- Site visitors: technical logs needed to run the site securely; when you send a form, an irreversible hash of your IP address to block repeated spam submissions (the IP itself is not stored and the hash is deleted after 1 day); and, only if you consent, measuring which ad brought you here and how you use the site.
3. Legal basis
| Purpose | Legal basis (KVKK Art. 5) |
|---|---|
| Replying to your form or proposal request | Art. 5/2-c — directly related to forming a contract at your request |
| Reviewing your business's public information | Art. 5/2-f — legitimate interest; Art. 5/2-d — information made public by the data subject |
| Accounts and providing the service | Art. 5/2-c — performance of a contract |
| Payments and invoicing | Art. 5/2-c and Art. 5/2-ç — legal obligation |
| Security logs and abuse prevention | Art. 5/2-f — legitimate interest |
| Analytics and advertising cookies | Art. 5/1 — explicit consent ("Accept" on the cookie banner) |
4. Transfers to third parties
Most of the providers below are based outside Turkey, so these are transfers abroad under KVKK Art. 9. We name them rather than writing "service providers".
| Recipient | Data | Purpose |
|---|---|---|
| Vercel Inc. (USA) | Request data and application logs | Hosting the site |
| Supabase Inc. (USA) | Form records, account data, chat logs, settings | Database hosting |
| Hostinger (EU) and Google LLC (USA, Gmail) | Form contents (notification email sent to us) | Delivering new-form notifications to info@webtochat.net and our manager's mailbox |
| Anthropic PBC (USA) | Messages written to the assistant and the business's knowledge base | Generating AI replies |
| Stripe, Inc. (USA / Ireland) | Client email, subscription and payment data | Payments and subscriptions |
| Google LLC / Google Ireland Ltd. | Cookie IDs, page views and ad interactions (only with consent) | Measuring visits and ad performance |
| Meta Platforms, Inc. / Meta Platforms Ireland Ltd. | Cookie IDs and page views (only with consent); message content and number when you write on WhatsApp | Ad measurement; WhatsApp contact |
Otherwise, personal data is shared with public authorities only where the law requires it. We never sell personal data.
5. Retention period
- Contact form records: 12 months. Records older than 12 months are deleted automatically every night. If you become a client, contract information is kept separately for the contract term.
- IP hash used for spam prevention: 1 day.
- Account and settings data: while the account is open, then as long as legal obligations require.
- Payment and invoice records: for the period required by tax and commercial law.
- Analytics and advertising cookies: as listed in the Cookie Policy.
6. Your rights (KVKK Art. 11)
- To learn whether your personal data is processed;
- To request information about the processing;
- To learn the purpose of processing and whether data is used accordingly;
- To know the third parties, in Turkey or abroad, to whom data is transferred;
- To request correction of incomplete or inaccurate data;
- To request erasure or destruction under the conditions in KVKK Art. 7;
- To request that corrections and erasures are notified to recipients;
- To object to a result against you arising solely from automated analysis;
- To claim compensation for damage caused by unlawful processing.
7. How to apply
Send your request in writing to info@webtochat.net, with enough information for us to verify your identity. We answer free of charge within 30 days at the latest. If your request is refused or you find the answer insufficient, you may complain to the Turkish Personal Data Protection Board. Full contact details are on the Contact page.