Privacy Policy

Last updated: 1 October 2026

This policy explains the personal data processed through the FERSoft cloud software (the "Service") and this website under the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the EU General Data Protection Regulation ("GDPR").

1. Data controller

• Company: AKG Bilişim Tasarım Danışmanlık
• Owner: Hüseyin Akgül (sole proprietorship)
• Address: Yeniköy Mahallesi, 41. Sokak, No: 43/A10, Döşemealtı / Antalya, Türkiye
• E-mail: infoakgdb@gmail.com
• Phone: +90 544 333 5208

For the business data that customer companies enter into the program (e.g. information about their own customers and employees), the respective customer company is the data controller; we process this data only on the customer's behalf and instructions, to provide the Service (data processor).

2. Data we process

• Account and contact data: company name and code; users' first and last name, user name, title and role; e-mail and phone entered by the user.
• Security and usage logs: IP address, login times, session data, the audit log in the program, two-step verification setup data. Passwords are not stored in plain text but in an irreversible form (scrypt).
• Company business data: data entered into the program by the customer, such as recipes, stock, production, orders, quotes and customer records.
• Payment data: card payments are processed by Paddle.com (customers outside Türkiye) or iyzico (customers in Türkiye); card numbers never reach us. From the payment provider we receive only the subscription status, payment amount, currency, period and order/invoice details, and customer/subscription IDs. For bank transfers, the payment date, amount and receipt reference are recorded.
• Billing details (customers in Türkiye): company name, the authorised person's name, e-mail, mobile phone, tax number or national ID number, tax office and billing address, processed to issue invoices and, for card payments, passed to the payment institution (iyzico).
• Correspondence: information you send us by e-mail.
• Questions to the AI assistant: the question you type in the program's "Assistant" window, the previous few questions and answers of the same chat, your interface language, the name of the open screen and your user permissions are processed to generate the answer. The company's records (stock, orders, customers, etc.) are not sent to the assistant. We do not store questions or answers; only the number of questions and the usage per company (for cost calculation) are recorded. Using the assistant is optional; do not type passwords or personal data in your questions.

3. Purposes and legal bases

• Providing the Service, managing accounts, support and billing — performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)).
• Security, abuse prevention, backups and audit logs — legitimate interests (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).
• Retention obligations under tax and commercial law — legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6(1)(c)).

Your data is not used for advertising, marketing profiling or sale.

4. Cookies and browser storage

Only cookies that are strictly necessary for the Service are used; no analytics, advertising or tracking cookies:

• fersoft_sid — session (while you are logged in, at most 7 days);
• fersoft_giris — remembers that this browser has logged in before and shows the login screen when the site opens (1 year, contains no personal data);
• fersoft_cihaz — remembers two-step verification if "Remember this computer for 30 days" was selected (30 days).

Browser storage holds only the language preference and the company code; a chat with the AI assistant is kept only in the open tab (session storage) and deleted at logout. The Paddle or iyzico checkout form opened on the card payment page may use the payment provider's own cookies.

5. Data transfers

• Hosting: data is stored on our server in a data centre in Türkiye operated by our hosting provider.
• Card payments (outside Türkiye): when you pay by card, you provide your payment and billing data directly to our reseller Paddle.com Market Limited (United Kingdom) for payment processing, taxation and invoicing; Paddle processes it under its privacy policy.
• Card payments (Türkiye): card details are entered directly into the iyzico Ödeme Hizmetleri A.Ş. checkout form; your billing details are passed to iyzico to run the subscription and are processed under iyzico's privacy policy.
• AI assistant: when you use the assistant, your question and the context listed above are sent to Anthropic, PBC (USA) to generate the answer and are processed under Anthropic's commercial terms and privacy policy; Anthropic does not use this data to train its models. Using the assistant is optional.
• To competent public authorities, only where required by law.

Apart from these, your data is not shared with third parties.

6. Retention

• Account and company data is kept for the duration of the subscription. When the subscription ends, the data is handed over to you on request and, upon your deletion request, deleted including backups, subject to statutory retention obligations.
• Automatic backups cover the last 30 days on a rolling basis.
• Invoice and payment records are kept for the period required by tax law (10 years).

7. Security

Connections are encrypted with HTTPS only; each company's data is kept in a separate database; passwords are stored irreversibly; two-step verification, access permissions, login attempt limits and audit logs are used; data is backed up daily.

8. Your rights

Under KVKK Art. 11 and the GDPR, you have the right to know whether your personal data is processed, to request information, to learn the purpose of processing and the recipients, to request rectification of incomplete or inaccurate data, erasure or destruction, to object to processing, to receive your data in a portable format, and to claim compensation for damage caused by unlawful processing. Send your requests to infoakgdb@gmail.com; they are answered within 30 days at the latest. Requests about company business data should first be addressed to the respective customer company. You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority or the supervisory authority of your country.

9. Changes

This policy may be updated; the current version is always published on this page.