Legal

Privacy Policy

Version 1 Effective date: September 23, 2026

This Privacy Agreement explains how your information is collected, used, shared and protected when you use the Çözüm Hanem website, management and resident panels, and mobile applications (together, the "Platform") operated by Akıl Yapay Zeka ve Yazılım Teknolojileri Anonim Şirketi (the "Company"). Legal information on the processing of personal data is also set out in the KVKK Privacy Notice, and cookie use in the Cookie Policy. Accepting this text does not constitute explicit consent to the processing of your personal data.

1. Data Controller and Separation of Roles

Trade name
Akıl Yapay Zeka ve Yazılım Teknolojileri Anonim Şirketi
Brand
Çözüm Hanem
MERSİS number
0025117079500001
Tax office / number
Şehitkamil / 0251170795
Trade registry
Gaziantep Trade Registry Office – 80814
Head office address
OSB 2. Bölge 83235 Nolu Cd. No:8, Başpınar (Organize) OSB, 27620 Şehitkamil/Gaziantep
Phone
+90 551 678 89 15
Email
[email protected]
Website
https://www.cozumhanem.com

There are two different roles on the Platform:

  • Data for which the Company is the data controller: website visitors, contact, demo, registration and dealership applications, the security of user accounts, online payment intermediation services, support requests, and data belonging to the authorised representatives of property-management companies and compound managements that are customers of the Company.
  • Data processed on behalf of managements: For data relating to compound and apartment building management such as unit, resident, monthly maintenance fee, debt, collection, meter, request and announcement records, the data controller is the relevant management (the owners' association, the property manager or the property-management company). The Company processes this data as a data processor in line with the management's instructions; requests concerning this data must first be sent to your management. The Company supports the management in responding to such requests.

2. What Information Do We Collect?

  • Identity and contact information: first name, last name, phone, email; for online payments, where requested by the payment institution, the Turkish ID number and address if on record.
  • Residence and management information: unit, block, owner/tenant status, occupancy start and end dates.
  • Financial information: maintenance fee and debt records, payment and refund history, receipts; if you use a stored card, the masked card number (first and last digits), the card brand and the card token issued by the payment institution.
  • Request and communication content: fault and request records, messages, support correspondence; and, if you use the AI-powered assistant on the Platform or the WhatsApp/Telegram channels, the message content in those channels.
  • Transaction security information: IP address, browser and device information, session and transaction logs, cookies.
  • Field app information: For field staff and couriers, location data only while an active job is in progress; detailed information about this processing is also provided separately in the field app.

3. What Purposes Do We Use the Information For?

  • Providing the Platform services, creating and managing your account,
  • Processing online maintenance fee and debt payments through a payment institution, posting payments to debt records and issuing receipts,
  • Responding to your requests, complaints and support tickets; sending announcements, payment reminders and transaction notifications,
  • Ensuring information security, preventing unauthorised access and fraud, keeping records auditable,
  • To meet legal obligations and respond to requests from authorised institutions,
  • Measuring and improving service quality.

No commercial electronic messages (advertising, campaigns) are sent to you without your consent. Transaction notifications and debt reminders are part of the service and do not constitute commercial electronic messages.

4. Payment and card security

  • Online payments are processed through the infrastructure of iyzico Ödeme Hizmetleri A.Ş., which holds an operating licence from the Central Bank of the Republic of Türkiye under Law No. 6493.
  • On the website, your card details are entered on the payment provider's secure payment page and never reach the Company's servers. In the mobile app, the card details you enter are transmitted instantly over an encrypted connection (TLS) via the Company's servers to the payment provider; this information is not recorded, stored or used for any other purpose by the Company.
  • Your card number, expiry date and security code (CVV/CVC) are not stored by the Company. If you choose to use the card-on-file feature, your card is stored with the payment institution; the Company only keeps the masked card number, the card brand and the card token issued by the payment institution. You can delete your saved card at any time.
  • 3D Secure verification by your card-issuing bank may apply to payments. The payment institution operates in compliance with card security standards (PCI DSS).
  • All pages of the Platform are served with SSL/TLS encryption (https).

5. Sharing of information

Your information is not sold or rented. It is shared only with the recipients below, limited to the purpose and on a proportionate basis:

  • Your management: The residential compound, apartment building or property-management company you belong to, as far as your payments, requests and unit records are concerned.
  • Payment institution and banks: iyzico Ödeme Hizmetleri A.Ş. and the relevant banks for processing and refunding payments, preventing fraud and meeting statutory identity-verification obligations; and, depending on your management's preference, the banks and integrators used to reconcile bank account transactions.
  • Our service providers: suppliers providing server and data center, content delivery and security (CDN), SMS, email, mobile push notification, map and location services, and the AI-powered assistant service. These suppliers process your information only to provide services to us and under contractual confidentiality obligations.
  • Businesses: when you place a grocery, food or tradesperson order, the name, phone number and delivery address needed to prepare and deliver the order are shared with the relevant business.
  • Authorised institutions and bodies: where legally authorised public institutions, judicial authorities and law enforcement agencies make duly issued requests.

6. Where data is stored and transfers abroad

The platform's application servers and database are hosted in data centers in Türkiye. However, because the servers of content delivery and security providers (Cloudflare), mobile push notifications (Google Firebase), the website's font and UI libraries (e.g. Google Fonts, cdnjs, jsDelivr), bot protection on login pages when enabled (Google reCAPTCHA), and service providers such as the AI-powered assistant, WhatsApp and Telegram are located abroad, your personal data (in particular your IP address, device and notification information, and any content you type into the assistant or messaging channel) is transferred abroad depending on your use of these services.

As these transfers are continuous in nature, they are not based on your explicit consent. The transfers are carried out in accordance with Article 9 of Law No. 6698, on the basis of either an adequacy decision issued by the Personal Data Protection Board regarding the relevant country, sector or international organisation, or, where no such decision exists, one of the appropriate safeguards provided for in the Law, such as signing the standard contract announced by the Board with the relevant service provider and notifying the Board. You can find out which safeguard a transfer relies on by contacting [email protected].

7. Retention periods

Your information is stored for as long as required by the purpose for which it is processed and for the periods stipulated in the relevant legislation. For example, commercial books and documents are kept under the Turkish Commercial Code and the Tax Procedure Law, distance sales contracts and consent records for at least three years as required by legislation, and access logs for the period stipulated in the relevant legislation. At the end of the period, the information is deleted, destroyed or anonymised. The retention period for data processed on behalf of managements is subject to the instructions of the relevant management.

8. Security measures

To protect your information, technical and administrative measures are applied, such as encrypted communication (SSL/TLS), role- and scope-based authorisation, irreversible storage of passwords, protection against brute-force and automated attacks, retention of access and transaction logs, change audit trails, regular backups and confidentiality obligations for employees. You are also responsible for keeping your account details confidential; if you notice anything suspicious, you must change your password and notify us.

9. Children's privacy

The Platform is not intended for anyone under 18. Creating an account on the Platform, making payments and entering into Platform agreements (including the Terms of Use and the Distance Sales Agreement) are only possible for adults with full legal capacity. If a unit or debt record belongs to a person under 18, transactions are carried out by that person's legal representative in their capacity as representative.

10. Your rights

You can find your rights and application methods under Article 11 of the Personal Data Protection Law No. 6698 (KVKK) in the KVKK Privacy Notice.

11. Third-Party Links

The Platform may contain links to third-party websites. The Company is not responsible for the privacy practices of these sites; we recommend reviewing the privacy notices of the relevant sites.

12. Changes

This text may be updated to reflect changes in legislation and services. Each update is published as a new version; the version number and effective date appear at the top of the page. Material changes are also announced through the Platform.

13. Contact

For privacy-related questions and requests, you can email [email protected], call +90 551 678 89 15, or write to OSB 2. Bölge 83235 Nolu Cd. No:8, Başpınar (Organize) OSB, 27620 Şehitkamil/Gaziantep.