KVKK Disclosure Notice

This notice is issued by the company identified below, acting as data controller under Personal Data Protection Law no. 6698 (KVKK).

Data controller

TodoMore Yazılım ve Teknoloji Hizmetleri Limited Şirketi

Brand

TodoMore

Address

Ünalan Mah. Ünalan Cad. No: 1 İç Kapı No: 01 Üsküdar / İstanbul

Tax ID

8450774678

E-mail

info@letstodomore.com

• Identity data: first name, last name
• Contact data: e-mail address, phone (optional)
• Customer transaction data: account activity, preferences, subscription status
• Financial data: invoice title and address, payment amount and date, payment institution transaction reference (card numbers are not processed)
• Transaction security data: IP address, browser and device information, session records
• Marketing data (only with explicit consent): cookie and analytics data

• Providing and maintaining our services
• Account creation, authentication and authorisation
• Operating subscription, collection and invoicing processes
• Running customer satisfaction and support processes
• Operating information security processes and preventing abuse
• Meeting legal obligations
• Product development and marketing analysis, where you give explicit consent

Your personal data is processed on the following legal grounds under Article 5 of the KVKK:

• Necessary for the conclusion or performance of a contract — the user agreement and subscription relationship (Art. 5/2-c)
• Compliance with a legal obligation — keeping tax and accounting records (Art. 5/2-ç)
• Legitimate interests — system security, fraud and abuse prevention (Art. 5/2-f)
• Explicit consent — marketing analytics and non-essential cookies (Art. 5/1)

Your personal data is shared with the following parties to the extent necessary to provide the service, within the scope of your explicit consent, or where legally required:

• Cloud infrastructure provider — Supabase (Frankfurt, Germany, EU region)
• CDN, security and hosting provider — Cloudflare, Inc.; for carrying traffic, bot protection and attack filtering
• Payment providers — iyzico Ödeme Hizmetleri A.Ş. (Türkiye) for customers billed in Türkiye; Paddle.com Market Ltd (merchant of record) for customers billed elsewhere
• E-mail service provider — for delivering transactional e-mail
• Public authorities — only where legally required and limited to the scope requested

User data is stored on servers in the EU region (Frankfurt, Germany). This transfer is carried out within the framework of Article 9 of the KVKK and with the safeguards required by the Board.

For customers billed in Türkiye, payment data is processed in Türkiye by iyzico and is not transferred abroad. For customers billed elsewhere, payment data is processed by Paddle as merchant of record.

Cloudflare delivers content-distribution and security services over a global server network; in that context traffic data such as IP addresses may be processed on edge servers abroad. The transfer takes place for the purpose of providing the service and ensuring its security, under the data processing commitments agreed with the provider.

A detailed breakdown of data processed through cookies is available on the Cookie Policy page.

Your personal data is retained for as long as the purpose of processing requires and for the limitation periods set out in applicable legislation.

When you delete your account, your content data is deleted within a reasonable period; billing and accounting records are retained for the minimum period required by tax legislation.

Under Article 11 of the KVKK you have the right to:

• Learn whether your personal data is being processed
• Request information if it has been processed
• Learn the purpose of processing and whether the data is used in line with that purpose
• Know the third parties to whom the data is transferred, in Türkiye or abroad
• Request correction if the data is incomplete or inaccurate
• Request erasure or destruction in line with legislation
• Request that correction, erasure or destruction be notified to third parties to whom the data was transferred
• Object to a result against you arising from analysis carried out exclusively by automated systems
• Claim compensation for damage suffered due to unlawful processing

You may submit KVKK requests in writing or electronically. Requests are concluded within thirty (30) days at the latest, depending on the nature of the request.

E-mail

info@letstodomore.com

Subject line

KVKK Request

Please include

Your full name, the e-mail address of the account concerned, contact details and the subject of your request

Postal address

Ünalan Mah. Ünalan Cad. No: 1 İç Kapı No: 01 Üsküdar / İstanbul

This notice may be updated as needed. For material changes, a notification is sent to your registered e-mail address.