KVKK Privacy Notice
You can find information and explicit consent texts about the processing of your personal data under Law No. 6698 on this page.
1) Personal Data Protection Law (KVKK) Information Text
(PostAIPilot – Post ai Pilot)
1. Identity of the Data Controller
In accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data is processed by Furkan Pehlivanoğlu Sole Proprietorship (“Company” or “PostAIPilot”) as the data controller, within the scope described below.
Title: Furkan Pehlivanoğlu Sole Proprietorship
Address: Cevizli Mahallesi, Zuhal Caddesi, Ritim İstanbul Sitesi, A4 Blok, No: 46 D, Floor: 3, Apartment: 34, Maltepe / ISTANBUL
Email: info@postaipilot.com
Mersis/Tax Number: 7240646671
2. Categories of Personal Data Processed
Within the scope of Post ai Pilot, the following categories of personal data may be processed due to your creation of a user account, purchase of a plan/subscription, and use of automated sharing and AI-powered content creation services:
Identity Information:
First name, last name, username, company name (authorized person information for corporate clients).
Contact Information:
Email address, phone number, billing address.
Account and Membership Information:
User ID, password (hash), account creation date, plan/package type, credit balance, subscription information, usage/log records (login/logout, transaction dates/times).
Plan and Usage Information:
Your purchased plan/package contents, credit usage, number of content items created, and posting dates/times entered into the planner.
Payment and Billing Information:
Payment amount, currency, payment date, payment status (successful/unsuccessful), billing information.
Note: Your credit card/debit card information is processed and stored by a contracted payment provider (such as Iyzico), not by the Company.
Social Media Integration Information:
User IDs, page/account information, access tokens, scheduled posts, post content and times, and relevant API logs from Instagram and other social media platforms.
Content and Transaction Data:
The platform includes text/images you upload, prompts you write, AI-generated content, drafts, and campaign notes.
Technical Specifications:
IP address, device type, browser information, operating system, cookie records, session information, error logs.
Commercial Communication and Permission Information:
Email/SMS/call permissions, communication preferences, your explicit consent statements, permission/data processing logs.
3. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
Within the scope of the formation and performance of the contract:
- Creating and managing your user account,
- The plans/packages and credits you purchased will be added to your account.
- Post ai Pilot offers content creation, scheduling, and automated sharing services.
- Enabling integration with Instagram and your other social media accounts,
- Processing payments, handling returns and invoicing processes.
In the context of fulfilling legal obligations:
- Maintaining tax and accounting records,
- Compliance with retention obligations,
- Responding to information requests from relevant authorities.
Within the scope of legitimate interest:
- Ensuring the security of the platform and infrastructure,
- Error detection, logging, and performance analysis.
- Improving service quality, developing new features and plans,
- Detection and prevention of abuse, fraud, and unauthorized use.
Based on your explicit consent:
- Sending commercial electronic messages regarding campaigns, innovations and special offers,
- Access to your social media accounts via API and automated/scheduled posting,
- Content creation and related data transfer abroad using artificial intelligence services and cloud infrastructure (OpenAI, AWS, etc.).
4. Methods and Legal Grounds for Collecting Personal Data
Your personal data is collected when you use our postaipilot.com website, our mobile application, fill out registration/payment forms, or contact our support channels.
Social media and API integrations,
Data is collected electronically through automated means such as cookies, log records, and similar technologies.
Your data is processed based on the following legal grounds within the scope of Articles 5 and 6 of the KVKK (Turkish Personal Data Protection Law):
- It must be directly related to the establishment or performance of a contract (membership, service provision, payment),
- In order for the data controller to fulfill its legal obligations (accounting, storage, notification to official authorities),
- It must be necessary for the establishment, exercise or protection of a right.
- Data processing must be necessary for the legitimate interests of the data controller, provided that it does not prejudice your fundamental rights and freedoms.
- In relevant cases, your explicit consent is required (for commercial communications, social media access permissions, data transfer abroad, and the use of artificial intelligence services).
5. Parties to Whom Personal Data is Transferred and the Purposes
In accordance with Articles 8 and 9 of the KVKK (Law on Protection of Personal Data), your personal data may be transferred to the following recipient groups:
- Payment Institutions (Iyzico, etc.): For processing payment transactions, refund processes, fraud and risk control.
- Cloud Infrastructure Providers (AWS, etc.): For hosting systems, backing up data, and providing scalable infrastructure.
- AI Service Providers (OpenAI, etc.): For running prompt and content-based AI services and generating content.
- Social Media Platforms (Meta/Instagram, etc.): API-level integration for content scheduling and automated sharing.
- Our Suppliers and Business Partners: Companies providing technical support, maintenance, security, logging, and analytics services.
- Authorized Public Institutions and Organizations, Judicial Bodies: Within the scope of notification and information provision obligations arising from legislation.
- Legal and Financial Advisors, Auditors: Protecting our rights, within the scope of legal processes and audit activities.
In this context, some of your personal data may be transferred abroad due to cloud infrastructure and artificial intelligence services. Data transfer abroad is carried out in accordance with the provisions of Article 9 of the KVKK (Personal Data Protection Law) and with your explicit consent.
6. Retention Periods for Personal Data
Your personal data will be stored within the timeframes stipulated by relevant legislation and in accordance with the Company's data retention policies;
- Membership and account data: As long as your account is active; for at least 10 years after the account is closed,
- Invoice and payment records: At least 5 years, in accordance with the Tax Procedure Law and related legislation.
- Log and security records: For 2 years, in accordance with technical and legal requirements.
- Data regarding commercial communication permissions: Until the permission is revoked or for the maximum period stipulated by law.
They are stored; at the end of these periods, they are deleted, destroyed, or anonymized in accordance with the Personal Data Protection Law (KVKK).
7. Your Rights Under the Personal Data Protection Law (KVKK)
In accordance with Article 11 of the KVKK (Turkish Personal Data Protection Law), you can apply to the Company by:
- To find out whether your personal data is being processed,
- If it has been processed, request information about it.
- To learn the purpose of the processing and whether it is being used for that purpose.
- Knowing the third parties to whom it is transferred, whether domestically or internationally.
- Requesting correction if it is incomplete or incorrectly processed.
- According to the Personal Data Protection Law (KVKK) and related legislation, you can request the deletion or destruction of your personal data when the reasons requiring its processing cease to exist.
- Requesting that third parties to whom these transactions are transferred be notified,
- You have the right to object to a verdict that is unfavorable to you, which is based solely on analysis by automated systems.
- You have the right to claim compensation for damages you have suffered as a result of unlawful data processing.
You have rights.
You can submit your applications in accordance with the Personal Data Protection Law (KVKK) and relevant legislation, either by using the application methods published on postaipilot.com or in writing/via registered email to info@postaipilot.com.
Publication date of the Privacy Notice: 02.12.2025
2) EXPLICIT CONSENT TEXTS
The following consents are designed to be presented as separate checkboxes in the registration screen, settings, and integration steps.
2.1. Commercial Electronic Message Explicit Consent Text
“In accordance with Law No. 6698 on the Protection of Personal Data and Law No. 6563 on the Regulation of Electronic Commerce; I hereby give my explicit consent to receive commercial electronic messages regarding campaigns, discounts, announcements, and promotions related to the products and services offered by Furkan Pehlivanoğlu Sole Proprietorship via email, SMS, and telephone. I have been informed that I can withdraw this consent free of charge at any time.”
2.2. Social Media Access Permission (Instagram Tokens & Automatic Sharing)
“As part of the Post AI Pilot service, I hereby give my explicit consent to access my Instagram and other social media accounts via API, to process my user ID, page/account information, and access tokens on these platforms, to schedule and automatically/scheduled posts, and to share my data with domestic and international technical service providers for this purpose. I have been informed that I can withdraw this consent at any time through my account settings or by removing the integration.”
2.3. Data Transfer Abroad & Artificial Intelligence Services Explicit Consent Text
“I hereby give my explicit consent, in accordance with Article 9 of the KVKK (Personal Data Protection Law), for the transfer and processing of my prompts, texts, images, and technical usage data entered through the Platform to cloud service providers (e.g., AWS, etc.) and artificial intelligence service providers (e.g., OpenAI, etc.) located abroad, in order to provide AI-powered content creation and planning services offered by Furkan Pehlivanoğlu Sole Proprietorship. I understand that if I do not give this consent, I may not be able to benefit from some AI-based features of Post ai Pilot, and that I can withdraw my consent at any time.”