Privacy Notice
Last updated: 14 October 2026
This Privacy Notice explains how TUBU ARGE Inc. (“TUBU”, “we”, “our”) collects, uses, and protects personal data, in line with the Turkish Personal Data Protection Law (KVKK No. 6698) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Data Controller
TUBU ARGE Inc. acts as data controller.
Address: Teknopark Istanbul, 1/4C No:307, Pendik / Istanbul, Turkey
Email: info@tubu.io
Phone: +90 850 840 1859
2. Personal Data We Process
If you contact us by email, phone or the live chat on our website, we may process:
- Identity (first name, last name)
- Contact details (email, phone)
- Professional information (company, role)
- The content of the message you send
- Technical data (IP, browser, cookie data)
3. Purposes of Processing
- Responding to inquiries and information requests
- Providing service information and proposals
- Conducting and performing business relationships
- Maintaining information security
- Complying with legal obligations
4. Legal Bases
Your data is processed on the basis of (i) your explicit consent, (ii) the necessity to enter into or perform a contract, (iii) our legitimate interest, and (iv) compliance with legal obligations.
5. Sharing & International Transfers
We share your data only as necessary to provide our services with vendors operating under confidentiality obligations (e.g. email, cloud, live chat). International transfers comply with KVKK Article 9 and applicable GDPR safeguards.
6. Retention
We retain personal data for the duration required to fulfill processing purposes or as required by applicable law. After that, data is deleted, destroyed, or anonymized.
7. Your Rights
Under KVKK Article 11 (and corresponding GDPR rights where applicable), you may request access to, correction of, deletion of, or restriction on the processing of your personal data, object to processing, and request data portability.
To exercise these rights, write to info@tubu.io.
8. Cookies
We may use cookies to improve user experience and collect anonymous analytics. You may reject or delete cookies through your browser settings; some site features may then be limited.
9. Outreach to Public Institutions
We e-mail municipalities and other public institutions to introduce products relevant to their duties (e.g. Tubu Belediyem). If you received such an e-mail, this is how your information is handled.
- Data: your institution's name; the unit head's name, surname and title; institutional e-mail address and phone number; the dates and content of our correspondence.
- Source: compiled by hand from information publicly published on your institution's official website (directorates, units and contact pages). We do not buy lists or obtain data from third parties.
- Purpose: introducing our products and services relevant to your duties, answering your questions and, if you wish, arranging a presentation.
- Legal basis: our legitimate interest under KVKK Art. 5(2)(f). We write only to your institutional address, in your official capacity and within your area of responsibility.
- Transfers: your data is not sold or shared with third parties for marketing. Our e-mail service runs on Amazon Web Services, so correspondence is processed on its servers in Ireland. Correspondence records are kept in a private GitHub repository for software development and backup.
- Retention: correspondence records are kept for 3 years after the last exchange, then deleted or anonymised. Addresses of institutions that opted out are kept so that we do not write to them again.
- Opting out: reply with "iptal" and we will stop within 3 business days; your institution will not receive further promotional e-mails from us.
- Your rights: you can exercise the rights in section 7 by writing to info@tubu.io.