Personal Data Protection (KVKK) Disclosure Notice

Last updated: 20.07.2026

1. Identity of the Data Controller

Pursuant to Law No. 6698 on the Protection of Personal Data ("KVKK"), you are hereby informed by this Disclosure Notice, by the operator of the rankzupAI brand acting as the data controller identified below, about the processing of your personal data.

• Legal entity: rankzupAI
• Email: kvkk@rankzup.ai
• Website: rankzup.ai / app.rankzup.ai

2. Categories of Personal Data Processed

When using the rankzupAI service, the following categories of personal data are processed:

• Identity and contact data: full name, email address.
• Transaction security data: IP address, session/cookie identifiers, login timestamps.
• Usage (log) data: in-panel navigation, scan/report requests, usage volume and quota information.
• Payment/invoice data: full name/legal title, IBAN (sending party information) and billing address received via bank transfer receipts. Card data such as credit card number, expiry date or CVV is never collected or stored by rankzupAI in any way — payments are currently taken by bank transfer.
• Marketing communication data: the brand, industry and (if provided) email address of visitors who fill in the free test form.

3. Purposes of Processing Personal Data

• Account creation, authentication and session management
• Subscription/plan management, quota tracking and billing
• Operating the technical infrastructure required for the product to function (server, email notifications, error tracking)
• Customer support and request/complaint management
• Service improvement, security and prevention of fraud/abuse
• Fulfilling legal obligations (tax, accounting, responding to requests under KVKK Article 11, etc.)
• Product updates and marketing communication, provided your explicit consent exists

4. Data Transmission to AI Platforms — Critical Note

The core function of rankzupAI is to measure how your brand appears in the answers of artificial intelligence platforms such as OpenAI (ChatGPT) and Google (Gemini). For this measurement, your questions (e.g. "which is the best brand of X?") are sent to the APIs of the relevant providers.

No personal data of yours (full name, email, IP address, etc.) is included in these API calls. Only the brand name, product/service information and industry information required for the measurement are sent to the APIs. This information belongs not to you but to the brand you track, and as a rule is already publicly available commercial information. Therefore, transmissions to the OpenAI/Google APIs do not constitute a "transfer of personal data" within the meaning of the KVKK.

5. Parties to Whom Personal Data Is Transferred

Your personal data may be transferred to the following categories of recipient groups, solely for the stated purposes:

• Server hosting and infrastructure providers
• Email delivery (SMTP) provider — for notification and account emails
• Telegram — only via the alert channel you connect at your own request
• Legally authorized public institutions and organizations (upon request)

As explained in Article 4 above, no personal data is transferred to AI providers such as OpenAI/Google; only brand/industry information is transmitted to these providers.

6. Retention Period of Personal Data

Your personal data is retained for as long as your account is active and for the period required by the purposes above. Following your account closure request, and without prejudice to statutory retention obligations (e.g. billing records required under tax legislation), your data is deleted, destroyed or anonymized within a reasonable period.

7. Your Rights as a Data Subject (KVKK Art. 11)

Pursuant to Article 11 of the KVKK, you have the following rights:

• To learn whether your personal data is being processed
• To request information about it if it has been processed
• To learn the purpose of processing and whether it is used in accordance with that purpose
• To know the third parties to whom it is transferred domestically or abroad
• To request correction if it has been processed incompletely/incorrectly
• To request its deletion/destruction within the conditions set out in the KVKK
• To request that correction/deletion operations be notified to the third parties to whom the data was transferred
• To object to an outcome to your detriment arising from analysis by automated systems
• To request compensation for damages if you suffer loss due to unlawful processing

8. How to Apply

To exercise the rights above, you may send your request, together with information verifying your identity, to kvkk@rankzup.ai. Your application will be concluded free of charge within at most 30 days, depending on its nature.