Customer and Subscription Privacy Notice
Last updated: 2026-09-11
This notice explains the personal data processed when you buy a plan for YouReply Survey, make a payment, receive an invoice or contact support. YouReply is the data controller for this data.
1. Data controller
| Trade name | YouReply Teknoloji Ticaret Eğitim Danışmanlık Araştırma Organizasyon A.Ş. |
|---|---|
| Address | Hacettepe Üniversitesi Teknoloji Geliştirme Bölgesi, Beytepe Kampüsü, 6. Ar-Ge Binası C Blok, Çankaya / Ankara |
| Phone | +90 532 317 20 23 |
| info@youreply.com.tr | |
| Data protection requests | kvkk@youreply.com.tr |
| MERSIS No | 0982 1041 0030 0001 |
| Trade Registry No | 495271 |
| Tax Office / No | Doğanbey / 9821041003 |
2. Data processed, purposes and legal bases
| Data | Source | Purpose | Legal basis (KVKK Art. 5) |
|---|---|---|---|
| Order details: plan, period (monthly or annual), amount, order number, payment method, order and payment dates | The plan purchase screen in your account | Concluding and performing the sales contract, activating the plan, tracking the usage period | Art. 5(2)(c); Art. 5(2)(ç) |
| Contract approvals: the checkboxes "Preliminary Information Form: I have read and accept", "Distance Sales Agreement: I have read and accept" and "I consent to immediate performance of the service and understand that I no longer have a right of withdrawal."; stored with the order | Plan purchase screen | Evidencing pre-contract information and contract approvals; documenting the consent relevant to the withdrawal exception | Art. 5(2)(ç) (Law No. 6502 and Regulation on Distance Contracts); Art. 5(2)(e) establishment, exercise or protection of a right |
| Billing details: full name or company name, invoice type (individual or corporate), address, Turkish ID number or tax number and tax office, phone, email | The billing details step of the plan purchase screen | Issuing e-archive or e-invoices, tax and accounting obligations | Art. 5(2)(ç) (Tax Procedure Law No. 213, Turkish Commercial Code No. 6102); Art. 5(2)(c) |
| Card payment: card details are entered on the iyzico payment page and never reach YouReply; YouReply receives the payment result | iyzico payment page (3D Secure) | Collecting payment and completing the order | Art. 5(2)(c) |
| Bank transfer: payment amount, date, sender name and the order number in the description | Bank account movements | Matching the payment to the order and activating the plan after confirmation | Art. 5(2)(c); Art. 5(2)(ç) |
| Trial use: which product a trial was started for, start and end dates | When a trial is started | Managing the trial and ensuring the trial is used once per product per account | Art. 5(2)(c); Art. 5(2)(f) |
| Order emails: order notice, contract copy, invoice | When an order is placed and an invoice issued | Delivering the contract copy and invoice | Art. 5(2)(c); Art. 5(2)(ç) |
| Support, complaint and refund applications: correspondence content, order number | Emails you send to destek@, phone calls | Assessing and answering applications | Art. 5(2)(c); Art. 5(2)(ç); Art. 5(2)(f) |
3. Who receives it
- iyzico Ödeme Hizmetleri A.Ş. (Türkiye): for card payments, first and last name, email, phone, Turkish ID number, billing address, IP address and order details.
- Paraşüt (Türkiye): for issuing e-archive or e-invoices, name or company name, email, tax number and tax office, address, phone and invoice amount. Invoices are sent by email.
- Revenue Administration: as required by e-invoice and e-archive invoice legislation.
- Amazon Web Services, Amazon SES (Germany): sending order notice and contract copy emails.
- Google Workspace (Google data centres, including the United States): company mailboxes where support correspondence is kept.
- Hosting Dünyam Bilişim Teknolojileri Tic. Ltd. Şti. (Türkiye): servers holding order and invoice records.
- In organization accounts, the account owner and users with the billing role can see orders and invoices.
- Competent public authorities, courts and consumer arbitration committees on request.
International transfers rely on one of the transfer mechanisms provided for in Article 9 of the KVKK (for example, a standard contract). Full list: Sub-processor List.
4. Retention period
- Order, contract approval and invoice records are kept for 10 years under tax and commercial legislation. Even if you delete your account, these records are not deleted before the period ends.
- Support, complaint and refund correspondence is kept for the relevant limitation periods after the application is resolved.
- When the periods end, the data is deleted or anonymized.
5. No automatic renewal
Plans are period-based: payment is taken once per period, the subscription does not renew automatically at the end of the period and YouReply does not store card details. When the period ends, your account returns to the Free plan. Details: Preliminary Information Form.
6. Your rights
Your rights under Article 11 of the KVKK and how to apply are set out on the Data Subject Request Form page. For questions, write to kvkk@youreply.com.tr.