Privacy Policy

• Company Name: Blesyum Software and Technology Limited Company
• Tax Office / No.: Yakacık Tax Office / 1781821060
• Address: Orta Mah. Alparslan St. No. 8, 34880 Kartal/Istanbul
• Email: hello@blesyum.com
• Phone: 0850 307 71 77

3.1. Identification Information

First name, last name, Turkish ID number (only during contract processes), title, company information.

3.2. Contact Information

Email address, phone number, address information, and any corporate social media accounts you have shared.

3.3. Customer Transaction Information

Subscription plan and module information, order and project details, service history, billing information (title, tax office, tax ID/Turkish ID number, address), payment amount and status, contract information, and usage data from the customer dashboard (accounts.blesyum.com) usage information.

Card information is not shared with us: Card payments are processed through the infrastructure of a licensed payment processor; we only retain non-identifying information such as the transaction reference and the last four digits of the card.

3.4. Digital Tracking Information

IP address, browser type and version, operating system, device information, screen resolution, language preference, pages visited, page view durations, click data, session information.

3.5. Cookie and Tracking Data

Cookie identifiers, anonymous visitor ID, and consent record. Analytics and advertising measurement data (campaign parameters, conversion events) are collected only if you give your consent to the relevant cookie category and if the relevant tool has been enabled by us; you can see which tools are enabled in the cookie preference panel and withdraw your consent at any time.

3.7. Content Data (Subscription Services)

Records entered by our subscribers into the dashboard: current accounts, invoices, quotes, inventory transactions, customer and meeting records, documents, and attachments. This data belongs to the subscriber; Blesyum processes it solely to provide the service.

3.6. Marketing and Communication Data

Form submission information, meeting requests, free analysis requests, newsletter subscriptions, consent for commercial electronic communications, and marketing preferences.

• Website: Through contact forms, free analysis forms, meeting request forms, and cookie technologies on www.blesyum.com;
• Customer Portal: Through transactions conducted via accounts.blesyum.com;
• Direct Communication: Via email (hello@blesyum.com), phone (0850 307 71 77), and in-person meetings;
• Automated Methods: Through essential cookies and—if you have given your consent—analytics and marketing measurement tools;
• Customer Portal and Modules: Through records entered into the portal by the subscriber and authorized users (the subscriber is the data controller with respect to this data);
• Contractual Processes: Within the scope of service agreements, partnership applications, and commercial relationships.

• Providing and ensuring the continuity of Subscription Services (ERP, CRM, E-Commerce, B2B, Call Center, Email, Consulting, Advertising Management, and Web modules);
• Execution, delivery, and acceptance of Project Services (custom software, mobile applications, integration, and data migration);
• Account creation and management, as well as user and access rights management;
• Execution of contract processes, preparation of proposals, billing, and collection;
• Handling support requests and measuring service quality;
• Ensuring product security and preventing misuse and fraud;
• Developing the website and dashboard, and improving the user experience;
• Marketing communications and campaign measurement, subject to your consent;
• Compliance with legal obligations and resolution of legal disputes;
• Sending commercial electronic communications (to individuals who have given consent);
• Ensuring information security and preventing fraud.

Pursuant to Article 5(2) of the Personal Data Protection Law (KVKK), your personal data is processed based on the following legal grounds:

• Explicit provision in laws (tax legislation, commercial law obligations);
• Directly related to the establishment or performance of a contract;
• To enable the data controller to fulfill its legal obligations;
• Legitimate interests, provided that such processing does not infringe upon the fundamental rights and freedoms of the data subject;
• Your explicit consent (data processing for marketing purposes, use of cookies, commercial electronic communications).

• Hosting and Infrastructure: Providers from whom we obtain server, database, backup, domain name, DNS, and

content delivery network (CDN) services;

• Payment Provider: Card payments are processed via the iyzico Payment Services Inc. infrastructure;

card information is neither transmitted to nor stored by Blesyum;

• E-Invoice / E-Ledger Integrator: An authorized private integrator for

transmitting financial documents to the Turkish Revenue Administration (GİB);

• Email and Notification Delivery: Delivery providers used to send

system emails and notifications;

• Artificial Intelligence Providers: Only when you use artificial intelligence features

and only to the extent required for that specific process; providers do not use the data for model training;

• Analytics and Advertising Platforms: Only if you have given consent

for the relevant cookie category and the relevant tool has been enabled by us;

• Legal Authorities: Courts, prosecutors’ offices, and regulatory agencies (when

legally required).

You may request an up-to-date list of our subprocessors by emailing kvkk@blesyum.com. We do not sell your data.

Transfers Abroad: The servers of some infrastructure, analytics, and artificial intelligence providers may be located abroad. These transfers are carried out in accordance with the provisions of Article 9 of the Personal Data Protection Law (KVKK); they are made to countries with adequate protection, based on a written commitment or your explicit consent. If you do not use consent-based tools (analytics/marketing), such transfers will not take place.

• Contract data: Contract term + 10 years (statute of limitations under the Turkish Code of Obligations);
• Invoice and financial data: 10 years (Tax Procedure Code);
• Cookie and tracking data: Between the session duration and 2 years, depending on the cookie type;
• Commercial electronic communication consents: Until consent is withdrawn and for 3 years following withdrawal;
• KVKK application records: 10 years;
• Subscription content data: Access is terminated when the subscription ends; data is retained for 30 days and can be exported during this period; it is permanently deleted at the end of the 30th day. Documents required to be retained under financial regulations are exempt from this deletion;
• Statistical data: May be retained indefinitely after anonymization.

Personal data whose retention period has expired is periodically deleted, destroyed, or anonymized in accordance with the Regulation on the Deletion, Destruction, or Anonymization of Personal Data.

• Secure data transmission via SSL/TLS encryption;
• Firewall and intrusion detection/prevention systems;
• Regular security updates and patch management;
• Access control and authorization mechanisms;
• Database encryption and secure backup procedures;
• Employee confidentiality agreements and data security training;
• Data breach response plan and notification procedures.

Pursuant to Article 11 of the KVKK, you have the following rights:

• To learn whether your personal data is being processed;
• To request information regarding the processing of your personal data if it has been processed;
• To learn the purpose of the processing of your personal data and whether it is being used in accordance with that purpose;
• To know the third parties to whom your personal data has been transferred, whether within or outside the country;
• To request the rectification of your personal data if it has been processed incompletely or incorrectly;
• To request the erasure or destruction of your personal data under Article 7 of the KVKK;
• To request that third parties to whom your personal data has been disclosed be notified of any rectification or erasure;
• To object to a decision made solely through the automated analysis of processed data that adversely affects you;
• To request compensation for damages suffered due to the unlawful processing of your personal data.

• Email: To the address kvkk@blesyum.com with the subject line “KVKK Application”;
• Mail: By certified mail to the address: Orta Mah. Alparslan Sok. No: 8, 34880 Kartal/Istanbul;
• Notary: Through a notary on behalf of our company.

Your requests will be processed free of charge within 30 days at the latest.

This Privacy Policy may be updated from time to time. The current policy is always available at www.blesyum.com.

• Blesyum Software and Technology Limited Company
• Orta Mah. Alparslan St. No. 8, 34880 Kartal/Istanbul
• Email: hello@blesyum.com | Phone: 0850 307 71 77