Arsigo

KVKK Privacy Notice

Last updated: 29 April 2026

As data controller under Turkish Personal Data Protection Law no. 6698 ("KVKK"), Arsigo processes your personal data on the terms set out below.

1. Data controller

  • Legal name: ARN UNLU MAMÜLLER GIDA VE PAZARLAMA TİCARET SANAYİ LİMİTED ŞİRKETİ
  • Brand: Arsigo (arsigo.com)
  • Address: Şükrüpaşa Mah. Su Yolları Mevkii, Lalapaşa Yolu 1. km, Edirne Merkez, Türkiye
  • Tax office / number: Arda Tax Office — 0800376096
  • Email: destek@arsigo.com

2. Personal data we process

  • Identity: First name, last name, company name
  • Contact: Email address, phone number
  • Customer transactions: Plan selection, payment amount, invoice details (card numbers are NEVER stored by us — they are processed only by PayTR / Iyzico)
  • Account usage: Bot conversation logs, product catalog, knowledge base, usage analytics
  • Transaction security: IP address, browser information, session data

3. Purposes of processing

  • Providing the service and managing subscriptions
  • Generating AI-powered customer responses (anonymized)
  • Invoicing and collection of payments
  • Meeting legal obligations (tax, e-invoicing)
  • Improving service quality (aggregate / anonymous analytics)
  • Handling user support requests

4. Where data is stored

All personal data is stored in Supabase data centers within the regional data zone. Messages sent to the AI model (Anthropic Claude) are transmitted anonymously without user identifiers; Anthropic operates under a KVKK-compliant DPA, and the data is not used to train models.

5. Third parties data is shared with

  • Payment infrastructure providers: PayTR, Iyzico (for 3D Secure transactions)
  • SMS providers: NetGSM, İletiMerkezi (only when used by the customer)
  • AI: Anthropic (message content, anonymized)
  • E-commerce integrations: iKas, Shopify, etc. (the user provides their own credentials)

6. Your rights under KVKK Article 11

As a data subject, you have the right to:

  • Learn whether your personal data is being processed
  • Request information if it has been processed
  • Learn the purpose and whether it is used in line with that purpose
  • Know the third parties to whom data has been transferred (in or outside Türkiye)
  • Request correction if data has been processed incompletely or incorrectly
  • Request deletion or destruction within the conditions laid out in KVKK
  • Object to results of automated processing
  • Claim damages in the event of harm caused by unlawful processing

7. Account deletion and data destruction

You can permanently delete your account from Account → Settings → "Delete my account". After a deletion request, all your personal data is destroyed within 30 days. Data subject to legal retention obligations (such as invoicing records under tax law) is kept for the legally required period and then destroyed.

8. How to apply

To exercise your rights under Article 11 of KVKK, please send a written request with your identifying information to destek@arsigo.com. Your request will be answered free of charge within 30 days at the latest.