Poyais One
AboutFeaturesIntegrationsPricingContact
🌐 Türkçe'ye Geç
Giriş Yap
Poyais One'a hoş geldiniz.

Hesabınız yok mu? Kayıt olun.

Giriş yaparak Kullanım Şartları'nı kabul edersiniz.

Legal

Privacy Policy

Last updated: 27 September 2026

1. Data Collected

When you use the Poyais One platform provided by Poyais Digital Reklamcılık ve Teknoloji Limited Şirketi, the following data may be collected:

• Account information: First name, last name, email address and password (stored encrypted).
• Integration data: Advertising, analytics and commerce performance metrics from the accounts you connect (Google Ads, Meta Ads, Google Analytics 4, ChatGPT Ads, Criteo, RTB House, Shopify and Adjust included).
• Usage data: In-platform page views, clicks and feature usage.
• Technical data: IP address, browser type, operating system and device information.
• Communication data: Information submitted through support requests and contact forms.

2. Use of Data

Collected data is used for the following purposes:

• Delivering and improving platform services.
• Generating and sending weekly AI reports.
• Anomaly detection and notification delivery.
• Technical support and customer service.
• Identifying and preventing security vulnerabilities.
• Fulfilling legal obligations.

3. Data Security

The security of your data is one of our top priorities:

• All data is transmitted with SSL/TLS encryption.
• Platform integrations are secured via OAuth 2.0 protocol.
• Passwords are stored as Argon2 hashes.
• Third-party access tokens and integration credentials are encrypted at rest using symmetric (Fernet/AES) encryption.
• Our servers are hosted in secure data centers.
• Regular security audits are conducted.

4. Sharing with Third Parties

Your personal data is not shared with third parties except in the following cases:

• Legal obligation: When required by court order or legal regulation.
• Service providers: Technical infrastructure and processing providers necessary to operate the platform (Hetzner: hosting, Resend: transactional email, iyzico and Stripe: payment processing (your card details are processed only by these payment institutions and are not stored by us), Cloudflare: bot protection, and the large language model provider used by the platform's analysis and reporting features included). These providers process your data solely for service delivery purposes.
• Business transfer: Users will be notified in advance in the event of a company merger or acquisition.

The sale of data for advertising purposes is strictly prohibited.

5. Google User Data

Poyais One accesses data from your Google Analytics 4 and Google Ads accounts through Google's official APIs, and only after you explicitly grant access through Google's OAuth 2.0 consent screen.

Scopes requested and the reason for each:

• analytics.readonly — read-only access to your Google Analytics 4 reporting data (sessions, conversions, channel, audience and page breakdowns), used to display dashboards, generate weekly reports and detect anomalies.
• adwords — access to your Google Ads campaign, ad group, keyword, ad and creative performance data, used to display dashboards, generate reports and produce optimization recommendations. Any change to your Google Ads account is made only when you explicitly approve and initiate it within the platform; the platform makes no automated changes without your action.

How this data is handled:

• OAuth access and refresh tokens are stored encrypted at rest and are used solely to retrieve data on your behalf.
• Google user data is retrieved and displayed only to the authenticated users of the account that connected the integration, and is isolated from other customers of the platform.
• Google user data is never sold, never used for advertising or audience targeting, and never used to train artificial intelligence or machine learning models, including any third-party model.
• Google user data is not read by humans except with your explicit consent, where required for security purposes or to resolve a support request you have raised, or where required by law.
• You may revoke access at any time by disconnecting the integration within the platform or through your Google Account permissions page at https://myaccount.google.com/permissions. Upon revocation, the stored tokens are deleted.

Poyais One's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. International Data Transfers

Poyais Digital Reklamcılık ve Teknoloji Limited Şirketi is established in Türkiye and its servers are located in the European Union (Germany). Some of our service providers may process data outside Türkiye and the European Economic Area. Where such transfers occur, they are carried out on the basis of your explicit consent or other appropriate safeguards (including Standard Contractual Clauses), in accordance with Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and other applicable data protection legislation.

7. Data Retention

Your data is retained for as long as your account is active. If you delete your account:

• Your personal data will be permanently deleted from our systems within 30 days.
• Data that must be retained under legal obligations will be kept for the period specified in the relevant legislation.
• Anonymised statistical data may be retained.

8. User Rights

Under Article 11 of Turkey's Law No. 6698 on the Protection of Personal Data (KVKK), you have the following rights in relation to your personal data:

• The right to learn whether your data is being processed.
• The right to be informed about how your data is processed.
• The right of access to your personal data.
• The right to rectification of inaccurate or incomplete data.
• The right to request erasure of your data ("right to be forgotten"), subject to Article 7 of the KVKK.
• The right to restrict processing.
• The right to data portability.
• The right to object to processing.
• The right to withdraw consent at any time, where processing is based on consent.
• The right not to be subject to a decision based solely on automated processing which produces legal or similarly significant effects.
• The right to claim compensation for damages arising from unlawful processing.

If you are located in the European Economic Area or the United Kingdom, the equivalent rights under GDPR are honoured in the same way, and you retain the right to lodge a complaint with your local supervisory authority (your national data protection authority in the EEA, or the Information Commissioner's Office (ICO) in the United Kingdom).

To exercise these rights, please send an email to hello@poyaisone.com. We will respond within 30 days.

9. Cookies

The platform uses cookies for session management and to improve the user experience. For detailed information about cookie usage, please review our Cookie Policy.

10. Policy Updates

This privacy policy may be updated from time to time. Significant changes will be notified by email. You can always review the current policy on this page. Last updated: 27 September 2026

11. Contact

For questions about our privacy policy:

Email: hello@poyaisone.com
Phone: +90 850 307 26 43
Address: Yeşilköy Mah. Atatürk Cad. EGS Business Park, Blok: 12 Kat: 1, Bakırköy / Istanbul, Türkiye