Privacy and data protection

This is an English translation provided for convenience. The binding version is the Turkish original; if the two differ, the Turkish text prevails. Read the Turkish original

This text is a privacy draft prepared for the MVP stage. Once the real company details, data controller details and retention periods are settled, it must be updated with a formal KVKK text.

Information processed

• For account creation and sign-in: name, email address, password, or the account identifier of the social sign-in provider you chose.
• To create an invitation: couple and name details, date, time, venue, city, notes and the design JSON data.
• For RSVPs: guest name, contact detail, attendance status, headcount and notes.
• When the guest memory feature is used: the name of the person sharing, their optional note, and the photo, short video or voice recording they sent.
• For the payment process: the payment provider’s result, the amount, the currency, the reference and the transaction status.

Signing in with Google

When you choose to continue with Google, the name, email address and unique account identifier verified by Google are processed solely to create your Davetola account, match it with an existing account and provide secure sign-in. Your Google password, your access keys and other content in your Google services are not stored by Davetola. You can remove the connection to your Google account from your Google account settings.

Images and files

Uploaded images, videos and voice recordings are not written directly into the database; they are kept in secure file storage. Guest memories are not listed on the page that is open to guests — they are visible only in the account of the invitation owner. Safe file types and file size limits are enforced.

Payment security

Card details are not held anywhere in the Davetola system. In the live payment integration, the transaction result will be processed through callback/webhook verification received from payment providers such as iyzico or Param.

Email and technical logs

The delivery status, error information and transaction context of system emails can be followed in the admin panel. Limited technical logs may be kept for security, debugging and the prevention of abuse.

Phone and browser notifications

When you turn on phone notifications yourself, the device subscription address and the encryption keys created by your browser are associated with your account solely in order to deliver the notifications you selected. This record does not contain your phone number, your contacts or the files on your device. You can turn notifications off from your device or from the Davetola dashboard at any time. Announcements about new packages and campaigns are sent only if you turn that preference on separately.

Cookies and analytics

We collect anonymous visit statistics through Google Analytics, only with your explicit consent, to improve the site. Nothing is collected before you consent — if you choose "Decline" in the notice at the bottom of the page, or make no choice at all, no analytics cookie runs.