Privacy Policy
Last updated: 10 October 2026
This page summarises which personal data the teknogirisim.ai landing page and the app.teknogirisim.ai application platform collect, for what purposes and on what legal grounds, where the data is kept and for how long. The landing page has no forms, accounts or cookies. On the application platform you open an account, add your company, fill in the application form and upload documents; there is no ad network and no profiling. The Turkish version prevails.
1. Scope and Data Controller
This policy covers the teknogirisim.ai and app.teknogirisim.ai domains and is based on KVKK and, where applicable, the GDPR. During the pilot the data controller is:
| Item | Value |
|---|---|
| Trade name | U2 AI Studio Teknoloji Anonim Şirketi |
| MERSİS no | 0883124471000001 |
| Trade registry | Ankara Trade Registry, 434199 |
| Tax office / no | Sincan Tax Office, 8831244710 |
| Registered office | Ahi Evran OSB Mah. Erkunt Cad. No: 3 İç Kapı No: 41, 06935 Sincan / Ankara, Türkiye |
| Telephone | +90 850 346 82 82 · +1 415 712 78 82 |
| [email protected] | |
| Registered email (KEP) | [email protected] |
Two further documents cover their topics in more detail: the Privacy Notice (KVKK) and the Cookie Policy.
2. Data, purposes and retention
| Data | Purpose | Legal ground | Retention |
|---|---|---|---|
| Account: name, email, mobile phone, password hash, second-factor details; Turkish identity number if you use e-Devlet (encrypted); account identifier if you use Google/Apple | Opening the account and secure sign-in | KVKK Art. 5/2-c; GDPR Art. 6(1)(b) | While the account is open; deleted within 30 days of closure |
| Company and representation: company details, shareholding, SME details, proof of authority | Checking eligibility | KVKK Art. 5/2-c and 5/2-f; GDPR Art. 6(1)(b) and 6(1)(f) | 5 years from the conclusion of the application |
| Application: form answers, uploaded documents and extracted text, evaluation outputs, Decision Passport, appeals | Evaluation, notification of the decision with its reasons, appeals | KVKK Art. 5/2-c, 5/2-e and 5/2-f; GDPR Art. 6(1)(b) and 6(1)(f) | 5 years from conclusion; pilot test applications at the end of the pilot |
| Technical data: IP address, time, browser, session and audit records | Security, abuse prevention, record integrity | KVKK Art. 5/2-f; GDPR Art. 6(1)(f) | Session records 30 days; security and audit records 2 years |
Applications may be decided by an eligibility check and an AI-assisted evaluation; the safeguards of this automated decision process and your right to appeal are described in section 8 of the Privacy Notice. No advertising profiles or scores are produced from your data.
3. We do not ask for consent; what the checkbox means
Opening your account and evaluating your application fall under cases where KVKK Art. 5/2 allows processing without explicit consent (contract, Art. 5/2-c; legitimate interest, Art. 5/2-f). Asking for consent when another legal ground applies would misrepresent the basis of processing, so we do not. The checkbox on the registration form confirms that you have read the privacy notice; the declaration you confirm when submitting an application is the accuracy statement required by the Technology Startup Badge regulation. Neither is a declaration of consent.
4. Where data is kept and who sees it
Platform records are kept in a database on our server infrastructure and uploaded documents in storage on the same infrastructure. Only your account and the authorised people running the evaluation can see your application; access is role-based and every access is written to the audit log.
- Cloudflare: hosting, content delivery, security and bot verification; servers may be outside Türkiye.
- Amazon Web Services: hosting the platform database and documents; servers in Frankfurt, Germany.
- Mailgun (email; EU region) and NetGSM (SMS; Türkiye): delivering verification codes and notifications.
- Identity providers (e-Devlet, Google, Apple): only if you choose to sign in with them.
- AI service providers (Anthropic, OpenAI): only synthetic (test) application data during the pilot.
- Google Fonts: serving fonts on the landing page.
- Our legal and financial advisers and, where the law requires, competent public authorities.
We do not sell, rent or trade personal data or share it for anyone else's marketing.
5. Transfers abroad
Because part of the infrastructure is global, some data may be processed outside Türkiye, within the framework allowed by KVKK Art. 9 and the decisions of the Personal Data Protection Board, and, where the GDPR applies, under the transfer mechanisms of its Chapter V. During the pilot, real application data is not sent to AI services abroad; the platform technically blocks this.
6. Cookies and local storage
The landing page sets no cookie of its own. The application platform uses a strictly necessary session cookie to keep you signed in; it is not used for advertising or profiling. Your language preference and the fact that you closed the cookie notice are kept in your browser's local storage. There are no analytics or advertising cookies, ad networks, tracking pixels or heat maps. See the Cookie Policy.
7. Security
The site and platform are served over HTTPS/TLS. Turkish identity numbers and authenticator keys are stored encrypted and passwords as irreversible hashes; two-step verification is mandatory; every action is written to a tamper-evident audit log. Documents are accepted only as PDF, TXT or MD files of up to 20 MB. No system can be made fully secure, and we claim no certification we do not hold. If a breach likely to put you at risk occurs, we notify the Board and the people concerned under KVKK Art. 12/5 and, where the GDPR applies, Art. 33-34.
8. Your rights
Your rights under KVKK Art. 11 and how to exercise them are described in sections 9 and 10 of the Privacy Notice. Where the GDPR applies, you also have the rights of access, rectification, erasure, restriction, objection and data portability and the right to complain to a supervisory authority.
9. Children
The platform is intended for adults applying on behalf of their companies; we do not knowingly collect data from people under 18. If you believe a minor has registered, write to [email protected] and we will delete the record.
10. Changes
We update this page when the platform changes. Updates apply from publication onwards; significant changes are notified to registered users. If a change would require your explicit consent, we will ask for it separately.
11. Contact
[email protected] · KEP [email protected] · +90 850 346 82 82 · +1 415 712 78 82 · Ahi Evran OSB Mah. Erkunt Cad. No: 3 İç Kapı No: 41, 06935 Sincan / Ankara, Türkiye.