Privacy Policy
Last updated: July 30, 2026
This Privacy Policy explains how FireTrack ("Yangın Takip") collects, uses and protects personal data in connection with the fire safety service management platform provided at yangintakip.com (the "Service"). For the detailed disclosure required under the Turkish Personal Data Protection Law (KVKK), see the KVKK Disclosure.
1. Data We Collect
- Account data: name, e-mail address, phone, company/tenant details, role and permission data, password (stored only as an irreversible hash).
- Business records: customer (organization), site, location, equipment (asset), maintenance, survey, quote and stock records entered by the service companies using the platform.
- Technical data: IP address, browser and device information, sign-in and activity logs.
- Cookies: session and preference cookies — see the Cookie Policy.
2. How We Use Data
- Providing the Service, managing your account and authentication
- Sending maintenance reminders, reports and notification e-mails
- Security, debugging and abuse prevention
- Complying with legal obligations
We do not sell or rent your data to third parties for advertising.
3. Where Data Is Stored
Service data is stored in PostgreSQL databases hosted on servers (VPS) located in Turkey. Transactional e-mails are sent via Resend, a processor with servers located outside Turkey; only the information required to deliver the e-mail (recipient address, name, message content) is processed for this purpose.
4. Data Security
- All traffic is encrypted with TLS (HTTPS).
- Passwords are stored using irreversible hashing algorithms.
- In our multi-tenant architecture each tenant's data is isolated per tenant; API requests are filtered by tenant authorization.
- Access is restricted through role-based authorization.
- Regular backups are performed.
5. Data Sharing
Personal data is shared only with service providers strictly necessary to operate the Service (hosting, e-mail delivery), with competent public authorities where legally required, and in other cases with your explicit consent.
6. Retention
Account and business records are retained for the duration of the contractual relationship and for the periods required by applicable law. Upon account closure, your data is deleted or anonymized within a reasonable period, subject to statutory retention obligations.
7. Your Rights
For your rights under Article 11 of the KVKK and how to exercise them, see the KVKK Disclosure. For questions, contact info@yangintakip.com.
8. Changes
We may update this policy from time to time. Material changes will be published on this page; the "Last updated" date above shows the current version.