KVKK Notice

This notice is issued under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“the Law”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, for people who visit thothverse.com and use the forms on it. Sakla.co and ThothVPN publish their own notices on their product sites; this notice covers this site only. The Turkish text is the authoritative version.

Data controller

The data controller is Thothverse, whose legal name, address and contact details are listed in the “Data controller” block at the end of this page. Unverified lines are tagged and should not be relied on for formal requests until the tag is removed.

Personal data processed

Only the following data is processed on this site:

• Site visits: Visits are measured without cookies and without identifiers; the measurement is an aggregate count and is never matched to a person. The hosting infrastructure keeps the IP address and request details in short-lived server logs for security and debugging.
• Contact form: Name, email address, subject and message text.
• Early-access list (ThothVPN): Email address, chosen segment (Personal / Business) and optional team size.
• Robot check: The robot check that loads when a form is focused sends browser and network information to the provider running the check; this site does not store that information.

The forms do not ask for special categories of personal data; please do not write such data in the message field.

Purposes

• Replying to a message sent through the contact form and continuing the correspondence.
• Informing people on the early-access list, and only about that, when the product opens.
• Keeping the site secure and running, and preventing abuse and automated submissions.
• Meeting legal obligations and protecting rights in a possible dispute.

The early-access list is never sold, rented or used for any other purpose.

Legal bases

• Contact form: Article 5/2-c of the Law (directly related to the conclusion or performance of a contract) and Article 5/2-f (the legitimate interest of the data controller).
• Early-access list: explicit consent under Article 5/1 of the Law; consent is given when joining the list and can be withdrawn at any time.
• Server logs and robot check: Article 5/2-f of the Law (legitimate interest in security and continuity).

Transfers

Personal data is transferred only as far as the service requires: to the hosting and content-delivery provider (Cloudflare) and to the email delivery provider that forwards form messages. These providers’ servers may be located outside Türkiye; transfers are made within the framework of Article 9 of the Law and on the basis of data-processing agreements with the providers. Data is never transferred to advertising networks, data brokers or third parties for marketing.

Retention

• Contact form messages: at most 2 years after the correspondence is closed.
• Early-access list: until the product opens and the notification is sent, or until consent is withdrawn; at most 2 years.
• Server logs: the provider’s standard log retention; at most 30 days.

When the period ends, data is deleted, destroyed or anonymised.

Your rights

Under Article 11 of the Law you may apply to the data controller to:

• learn whether your personal data is processed,
• request information if it is,
• learn the purpose of processing and whether the data is used in line with it,
• know the third parties to whom it is transferred, in Türkiye or abroad,
• request correction if it is incomplete or inaccurate,
• request deletion or destruction under the conditions of Article 7 of the Law,
• request that corrections, deletions and destructions be notified to the third parties it was transferred to,
• object to a result against you arising from analysis exclusively by automated systems,
• claim compensation for damage caused by unlawful processing.

Requests

You may send your request, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, to the email address at the end of this page, to the KEP address once it is verified, or in writing to the postal address. Requests are answered free of charge within 30 days at the latest; where an action requires a separate cost, the tariff set by the Board may apply.

Changes

This notice is updated when processing activities or legislation change. The current version date is shown at the top of the page; earlier versions are shared on request.