Privacy Policy
This policy explains how personal data is collected, used, stored and protected when you use Ekipso (“Ekipso”, the “service”). It also serves as the information notice under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”).
1. Data controller
SU AGENCY DANIŞMANLIK VE YAZILIM BİLİŞİM TEKNOLOJİLERİ SANAYİ TİCARET LİMİTED ŞİRKETİ
Bulgurlu Mah. Kızıltepe Sk. Malatya Teknokent Teknokent-B No: 3/1 İç Kapı No: B12 Battalgazi/Malatya, Türkiye
Tax office / number: Fırat Vergi Dairesi / 7811093542
Email: info@susoftech.com
2. Data we collect
- Account data: name, email address, a one-way hash of your password (the password itself is never stored), company and brand details, billing details.
- Data from accounts you connect: when you connect Instagram, Facebook, TikTok, Google, marketplaces or e-commerce platforms, the access tokens those platforms issue, plus the account name, profile picture, account ID and the data within the scopes you grant (post statistics, products, orders, ad data).
- Content you provide: images, videos, text, plans and your conversations with the agents.
- Usage and security logs: sign-in time, IP address, browser information, activity logs.
- Cookies: we only use a strictly necessary session cookie. Your theme preference is stored in your browser. We do not use advertising or tracking cookies.
3. How we use data
- To provide the service: content calendars, post design, ad and profit analysis, reports.
- To publish content you have approved to the accounts you connected, and to measure results.
- For account security, troubleshooting, support and legal obligations.
- For billing and performance of the contract.
We do not sell or rent your data and we do not share it with third parties for advertising.
4. Legal basis
We process data on the basis of contract performance, legal obligations and legitimate interest (KVKK Art. 5/2), and for international transfers on the conditions of KVKK Art. 9 and, where required, your explicit consent.
5. TikTok data
Connecting a TikTok account is optional and is done through TikTok's official authorization screen (Login Kit). Your TikTok password is never shared with Ekipso.
user.info.basic: your TikTok account ID (open_id), display name and profile picture. Used to show you which account content will be posted to.video.uploadandvideo.publish: used only to post the videos and photos you prepared and approved to your TikTok account, with the privacy level, comment/duet/stitch and commercial content disclosure settings you choose. Nothing is sent to TikTok without your approval.- Access and refresh tokens issued by TikTok are stored encrypted on our servers and are used only for these posting operations.
- TikTok data is not used for advertising or profiling and is never sold to third parties.
- When you remove the connection under Settings › Connections in Ekipso, the tokens are deleted. You can also revoke Ekipso's access at any time in the TikTok app under Settings and privacy › Security (app permissions).
6. Meta (Instagram and Facebook) and Google data
Meta and Google accounts are connected with your authorization through official methods (OAuth, or access you grant from your business portfolio). Data from these platforms is used only to manage your pages and ad accounts, publish posts you approve and prepare performance reports. Data obtained from Google APIs is used in accordance with the Google API Services User Data Policy, including the Limited Use requirements.
7. Who we share data with
- Platforms you connect (TikTok, Meta, Google, marketplaces, e-commerce platforms): only for operations you instruct.
- AI providers: Anthropic (Claude) for text generation and Higgsfield for image and video generation. Only the text and images needed for the requested content are sent. Under Anthropic's commercial terms, data sent to the Anthropic API is not used for model training.
- Hosting and infrastructure providers: servers, backups and email.
- Public authorities: when legally required.
Some providers operate servers outside Türkiye (e.g. the United States). Such transfers are made in accordance with KVKK Art. 9.
8. Retention
We keep your data while your account is open. When you disconnect an account, its access tokens are deleted immediately. When you ask us to close your account, your data is deleted or anonymized within 30 days; records with a legal retention obligation (e.g. invoices) are kept only for the required period.
9. Security
Connection tokens and secret settings are stored encrypted, all traffic is encrypted with HTTPS, access is limited by role, and operations are logged.
10. Your rights
Under KVKK Art. 11 you may ask whether your data is processed, request information, learn the purpose of processing and the recipients, request correction, deletion or destruction, object, and claim compensation. Send requests to info@susoftech.com or to the postal address above; we respond within 30 days. See Data Deletion for deletion steps.
11. Children
Ekipso is a business service and is not intended for anyone under 18.
12. Changes
We may update this policy. Material changes are announced in the service or by email. The current version is always on this page.