Privacy Policy and KVKK Notice

Who we are

ManagementOK is operated by Civgin Medya Ticaret (“we”, “us”), Hakim Çağlar Işık Caddesi, Özen Business No: 3 Kat: 6 Daire: 117, İstasyon Mah., Merkez, Edirne, Türkiye, tax ID 2581151061. For the personal data described in this notice we are the data controller under KVKK. You can reach us at gabriel@integrie.com or at that address.

Data that you and your team put into a workspace — customers, contacts, products, offers, files — belongs to you. For that data you are the controller and we process it on your behalf, only to provide the service.

What we collect

• Demo requests: your name, email address, company (optional), how you quote today, your message, the language of the page and the fact that the request came from this website.
• Your account: name, email address and sign-in details. Passwords are stored hashed by our authentication provider; we never see them. If you sign in with Google, we receive your basic Google profile (name, email address).
• Workspace content: whatever you and your team enter or upload, and a record of changes (who changed what, and when).
• Integrations you turn on: if you connect Gmail, the messages you choose to sync and the replies you approve to send; if you connect WhatsApp Business, the messages exchanged with your business number.
• Technical data: our hosting providers process request data such as IP address, browser type and time of access to deliver and secure the service.

In your browser we store your language and theme choice (in local storage and a language cookie) and, once you sign in, your session. We use no analytics or advertising cookies and no third-party tracking.

Why we use it, and on what legal basis

• To answer your demo request and arrange a demo — necessary to take steps towards a contract, and our legitimate interest (KVKK Art. 5(2)(c) and (f)).
• To provide your account and workspace, including the AI features you choose to use — performance of our contract with you (Art. 5(2)(c)).
• To keep the service secure, prevent abuse and fix errors — our legitimate interest (Art. 5(2)(f)).
• To meet legal obligations, such as answering lawful requests from authorities (Art. 5(2)(ç)).

We do not sell personal data, we do not use it for advertising, and we do not use your workspace content to train AI models.

Who receives it

We use the service providers below (sub-processors). Each receives only what it needs for its task:

• Supabase — database, authentication and file storage.
• Lovable — application hosting and the AI gateway through which AI features run.
• AI model providers reached through that gateway (such as Google and OpenAI) — only the content you send to an AI feature, for example a customer email you paste in.
• Tavily and Firecrawl — only when you ask the app to look up a company or supplier website; they receive the search terms or web address, not your workspace data.
• Google — if you sign in with Google or connect Gmail.
• Meta (WhatsApp Business) — only if you connect WhatsApp.

We may also disclose data to public authorities when the law requires it.

Transfers outside Türkiye

These providers operate servers outside Türkiye (for example in the European Union or the United States), so your personal data is transferred abroad. We make these transfers under the appropriate safeguards of Article 9 of KVKK, on the basis of the standard contracts published by the Personal Data Protection Board.

How long we keep it

• Demo requests: up to 24 months after our last contact with you, then deleted.
• Account and workspace data: for as long as your account is open. After you close your account or ask us to delete it, we delete or anonymize it within 30 days, unless the law requires us to keep part of it longer.
• Backups follow a fixed rotation, so deleted data also disappears from them after a short period.

Your rights (KVKK Article 11)

You have the right to:

• learn whether your personal data is processed, and request information about it;
• learn the purpose of the processing and whether it is used in line with that purpose;
• know the third parties, in Türkiye or abroad, to whom it is transferred;
• ask for incomplete or inaccurate data to be corrected;
• ask for your data to be deleted or destroyed under the conditions of Article 7 of KVKK;
• ask that corrections or deletions be notified to the third parties who received the data;
• object to a result against you that arises solely from automated analysis of your data;
• claim compensation if you suffer damage because of unlawful processing.

Send your request in writing to our address above, or by email to gabriel@integrie.com from the email address you gave us. We answer free of charge within 30 days at the latest. If you are not satisfied with our answer, you may complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

Wherever you live, you can ask us for a copy of your data, a correction or deletion at the same address. You can also export your lists to CSV or Excel and download your files and PDFs at any time from the app.

Security

Each workspace is isolated at the database level, access is controlled by roles and permissions, and data is encrypted in transit (HTTPS) and at rest by our database provider. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.

Children

ManagementOK is a business tool and is not intended for anyone under 18.

Changes to this notice

When we change this notice we update the date at the top. If a change materially affects how we use your data, we will tell account holders by email or in the app before it takes effect.