At Zekiya ("Platform", "we"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information is collected when you use our platform, how it is used and how it is shared.
By continuing to use our platform, you are deemed to have accepted this policy. For detailed information about the processing of your personal data under the KVKK, see our KVKK Disclosure Notice.
Cookies are small text files that a website places on your device. The platform's cookie usage is explained in the table below:
| Cookie Name | Type | Purpose | Duration |
|---|---|---|---|
PHPSESSID |
Session management, keeping you logged in | End of session | |
csrf_token |
Form security against CSRF attacks | End of session | |
| Analytics cookies | Visitor statistics (may be used in the future) | Determined by your consent |
Essential cookies are required for the platform's functionality and cannot be disabled. For analytics cookies, you can delete or block cookies from your browser settings; however, in that case some platform features may not work properly.
The platform integrates with the following third-party services:
To generate AI Assistant responses, message content is sent to a third-party AI service provider's API. This provider processes the data under its own Privacy Policy and data processing agreement. The provider does not use API data for model training (commercial API agreement terms apply).
To create ad visuals, content information such as the product name and color palette is sent to the Canva API. For Canva's data policy: canva.com/privacy
When you connect your Facebook page and Instagram account to our platform, Meta grants our platform limited access permissions (ad management scope). Within this scope, only campaign creation, publishing and performance data retrieval are carried out. Meta's data policy: facebook.com/privacy
Payment transactions are carried out via the PCI-DSS compliant Iyzico infrastructure. Your card details are not stored on our platform; they are processed directly by Iyzico. Iyzico's privacy policy: iyzico.com
The WhatsApp Business API is used for morning ad suggestions and important notifications. Your phone number is processed only for this notification purpose and is not shared with third parties for marketing purposes. You can stop notifications anytime from the panel.
On the login, registration and password reset forms, the Cloudflare Turnstile bot protection service is used against automated attacks (credential stuffing, brute-force, scraping). Turnstile does not set cookies, does not build a browser fingerprint profile and does not collect data for tracking; it distinguishes bot from human based only on the IP address and short-lived session risk signals (Cloudflare Privacy Pass standard). More information: cloudflare.com/privacypolicy
If you discover a security vulnerability, please report it to [email protected].
For your applications: [email protected]
Your right to file a complaint with the Personal Data Protection Authority is always reserved:
kvkk.gov.tr
We may update this Privacy Policy from time to time. In the event of significant changes, we will notify you by email or platform notification. Continuing to use the platform after an update means you accept the changes. The current version of the policy is always published on this page.
For questions about our privacy policy:
Email: [email protected]
KVKK Applications: [email protected]