arrow_back
Program documents
Developer Support Program Privacy Notice (KVKK)
This is a courtesy translation. In case of any inconsistency, the Turkish text prevails.
Summary
This notice explains which of your personal data we process under the Onysoft AI Gateway Developer Support Program, and why. We process the information in your application form, the name, e-mail and phone on your account, your IP address and browser information at the time of application, your interview notes, and — AS ONE OF THE EVALUATION CRITERIA — the Onysoft usage records of your account (request count, active days, model variety, spend). Applying does not depend on explicit consent; only the optional case study and marketing permissions rely on your explicit consent. Application and interview records are kept INDEFINITELY. To exercise your rights, write to info@onysoft.com.
This summary is for information only; the full text below is what binds.
1. Data Controller
1.1
This notice has been prepared by Onysoft Veri Merkezi Sistemleri Yazılım Sanayi ve Ticaret A.Ş. ("Onysoft") as data controller, under article 10 of Law no. 6698 on the Protection of Personal Data ("KVKK").
1.2
Contact details of the data controller:
| Item | Value |
|---|---|
| Legal name | Onysoft Veri Merkezi Sistemleri Yazılım Sanayi ve Ticaret A.Ş. |
| Address | İTOB OSB Mah. 10032 Sk. No: 2 İç Kapı No: Z13, 35470 Menderes / İzmir |
| Tax office and number | Menderes Vergi Dairesi — 6440947328 |
| info@onysoft.com | |
| Phone | 0850 309 309 4 |
| Website | https://api.onysoft.com |
2. Scope
2.1
This notice covers natural persons applying to the Onysoft AI Gateway Developer Support Program and representatives applying on behalf of a team.
2.2
The notice for general use of your Onysoft account is in the Privacy Policy and KVKK notice at https://api.onysoft.com. This document explains only the processing specific to the Program and does not replace those documents.
3. Personal Data Processed
3.1
Categories of data processed under the Program:
| Category | Data | Source |
|---|---|---|
| Identity and contact | Full name, e-mail address, phone number, province | Your Onysoft account and the application form |
| Application content | Project name, summary, project/repository/demo addresses, stage, target audience, models used, expected request volume, requested credit, rationale, Turkish-product statement, KVKK context, free-text note | The application form |
| Transaction security | IP address and browser (user-agent) at submission and update, submission time, submission count | Automatically, by the server |
| Consent evidence | The identifier, version and effective date of the document you accepted, the time of acceptance, IP address and browser information | The consent checkboxes |
| Usage measurement | Request count over the last 30 and 90 days, number of distinct active days, model variety, spend | Your Onysoft usage records (usage_logs) |
| Interview | Interview date, channel and notes | The evaluation interview |
| Evaluation | Criterion scores, rationale, decision and any rejection reason | Onysoft evaluation |
warning
Do NOT enter a national identity number, health data, biometric data or any other special category of personal data into the application form. The form does not ask for such data and is not intended to process it.
The internet addresses you provide in the form are NOT visited by our servers; no preview, screenshot or favicon is fetched. The addresses are stored as plain text only and are opened by a human during the evaluation.
4. Purposes and Legal Grounds
4.1
Your data is processed for the following purposes and on the following grounds:
| Purpose | Legal ground (KVKK art. 5) |
|---|---|
| Receiving, reviewing and scoring the application | Directly related to the formation or performance of a contract (art. 5/2-c) |
| Contacting the applicant and holding the interview | Directly related to the formation or performance of a contract (art. 5/2-c) |
| Calculating the second criterion from usage records | Legitimate interest of the controller (art. 5/2-f): making sure the credit reaches a real user |
| Preventing misuse, duplicate and fake applications (IP, browser information) | Legitimate interest of the controller (art. 5/2-f) |
| Retaining consent evidence | Compliance with a legal obligation (art. 5/2-ç) |
| Loading the credit, invoicing and accounting records | Compliance with a legal obligation (art. 5/2-ç) |
| Case study, reference use and announcing your name/project | EXPLICIT CONSENT (art. 5/1) — optional |
| Sending product, campaign and program announcements | EXPLICIT CONSENT (art. 5/1) — optional |
4.2
Applying to and being evaluated for the Program does NOT depend on explicit consent. Withholding the optional permissions does not prevent your application from being accepted; it may only affect the relevant sub-item of the fifth evaluation criterion (feedback and visibility).
4.3
You may withdraw consent-based permissions at any time. Withdrawal does not invalidate processing carried out up to that point.
5. Automatic Measurement and Decision
5.1
The second evaluation criterion (25 points) is calculated AUTOMATICALLY from the Onysoft usage records of your account: request count over the last 30 and 90 days, number of distinct active days, model variety and spend.
5.2
The measurement covers only the user-key traffic OF THE ACCOUNT YOU APPLY WITH. If you use a corporate project key this link cannot be established automatically; an administrator must map it manually with your approval.
5.3
Measurement results are frozen together with the score and the measurement time, so that the score is not disputed later against data that has since changed.
warning
The final decision is not made solely by automated means. The automatic measurement accounts for 25 of 100 points; the remaining 75 points are human evaluation and every applicant is interviewed. Under KVKK article 11/1-g you may object to an evaluation producing a result against you.
6. Transfers
6.1
Your application data is NOT shared with third parties other than the Onysoft staff running the Program.
6.2
The following service providers come into contact with the data to the extent their service requires:
| Recipient | Data | Purpose |
|---|---|---|
| Our server hosting provider | All application records (hosted database) | Infrastructure service |
| Our e-mail delivery infrastructure | Full name, e-mail address, notification text | Delivery of application and result e-mails |
6.3
Transfers to authorised public authorities may be made where legislation requires, within its limits (KVKK art. 8).
6.4
If you have given case study permission, content about your project may be shared publicly through Onysoft's website and social media accounts. As this may take place over platforms located abroad it constitutes a transfer abroad; this is stated to you clearly when the permission is given.
7. Retention
warning
Application records, consent evidence, interview notes, evaluation scores and the related event records are kept INDEFINITELY. Onysoft does not automatically delete these records after a set period.
7.1
The reason is that the basis of a credit decision (what information, what score, what consent it rested on) must remain demonstrable at any later time. If the record is deleted, the reasoning behind the decision is lost with it.
7.2
Your erasure and destruction requests are assessed separately under articles 7 and 11 of the KVKK; a request is fulfilled for data we are not legally obliged to retain.
7.3
Rejected applications are not deleted either; if you apply in a later period your earlier application may be visible.
8. Data Security
8.1
Application data is displayed only in an administration screen accessible to authorised administrator accounts; access is subject to role checks and two-factor authentication.
8.2
Every status change, score and note made in the panel is written to an event log together with who did it and when.
8.3
Connections are encrypted with TLS. There is no file upload in the application; only links are provided.
9. Your Rights (KVKK article 11)
9.1
Under article 11 of the KVKK, by applying to the data controller you have the right to:
- (a)Learn whether your personal data is processed,
- (b)Request information if it has been processed,
- (c)Learn the purpose of processing and whether the data is used in line with that purpose,
- (d)Know the third parties to whom the data is transferred, in Türkiye or abroad,
- (e)Request correction if it is incomplete or incorrect,
- (f)Request erasure or destruction within the conditions of article 7 of the KVKK,
- (g)Request that correction, erasure and destruction be notified to the third parties to whom the data was transferred,
- (h)Object to a result against you arising from analysis solely by automated systems,
- (i)Claim compensation if you suffer damage due to unlawful processing.
9.2
You may submit your requests in writing, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, to İTOB OSB Mah. 10032 Sk. No: 2 İç Kapı No: Z13, 35470 Menderes / İzmir, or from the e-mail address registered on your account to info@onysoft.com. Your request is concluded within thirty days at the latest.
9.3
If your request is refused, if you find the response insufficient, or if no response is given in time, you may lodge a complaint with the Personal Data Protection Board.
Contact
Onysoft Veri Merkezi Sistemleri Yazılım Sanayi ve Ticaret A.Ş.
Address: İTOB OSB Mah. 10032 Sk. No: 2 İç Kapı No: Z13, 35470 Menderes / İzmir
Tax office and number: Menderes Vergi Dairesi — 6440947328
E-mail: info@onysoft.com
Phone: 0850 309 309 4
Address: İTOB OSB Mah. 10032 Sk. No: 2 İç Kapı No: Z13, 35470 Menderes / İzmir
Tax office and number: Menderes Vergi Dairesi — 6440947328
E-mail: info@onysoft.com
Phone: 0850 309 309 4
Other program documents
- Program Rules and Participation Terms (version 1.0)
- Case Study and Reference Permission (version 1.0)
- Explicit Consent and Commercial Electronic Message Permission (version 1.0)
This document is specific to the Onysoft AI Gateway Developer Support Program. For the general terms of Onysoft services see the Terms of Use and Privacy Policy pages.