This Privacy Policy explains what data is processed and how, when you use the website and digital order-tracking/loyalty services provided by İşlek ('we', 'us').

You may also review our KVKK Notice regarding the processing of your personal data, and our Cookie Policy regarding our use of cookies.

Parties

To avoid confusion, this policy defines three distinct parties:

İşlek: The company that develops and operates the digital ordering and loyalty software.
Business: our commercial customer ("tenant"), such as a café, restaurant, or venue that uses the İşlek software. It carries its own responsibilities toward its own staff and its own customers.
Customer / End User: The individual who joins a Business's loyalty program or visits our website.

What Data Do We Collect?

When you visit our website, browser and device information (IP address, browser type, page navigation behavior) may be collected via Google Analytics. When you join a loyalty card, your name (irreversibly masked) and, transiently, your email address are processed. For Business staff who log into the İşlek software with a business account, we additionally process the IP address and a browser/device summary they logged in with, solely to secure that Business's own account (detecting suspicious logins, viewing/ending active sessions). This data is shown only to that specific Business and is never shared with any other Business or third party.

How Do We Use This Data?

Operating the service (session management, order/tab tracking, loyalty balance)
To improve the product by analyzing website usage
To fulfill our legal obligations
Securing Business accounts (login attempt limiting, suspicious session detection), applicable only to that Business's own account

Who Do We Share Your Data With?

Your data is shared only with the infrastructure providers (hosting and database services) we use to deliver the service, and only to the extent technically necessary. Your data is never sold to third parties for marketing purposes.

Where Is Your Data Stored?

Your data is stored on the servers of the cloud hosting, database, and caching service providers we use to deliver the service. These providers may be located outside your country; by using the service you accept that your data may be processed in this way.

Data Security

We take reasonable technical and administrative measures to protect your personal data. For example, we apply a masking-at-source principle wherever possible, partially processing sensitive fields such as names from the moment they are received.

Contact

If you have questions about our privacy policy, you can reach us at: info@islek.app