Data Security and Privacy Center

Introduction and Scope

This Privacy Policy describes how data collected through the www.coratlas.com website operated by CORATLAS BİLGİ TEKNOLOJİLERİ LIMITED ŞİRKETİ (the “Company”) and through the software products and platforms offered by the Company (the “Services”) is processed. The Company is committed to protecting the confidentiality of data and maintaining the highest standards of information security.

Data We Collect

• User Information: Name, surname, business email address, phone number and organisation details.
• Platform Content: Member, customer, appointment, document and financial records entered into the Services by users.
• Automatic Data: IP address, device information, browser type and cookie data.

Purposes of Use

• Providing the Services without interruption and managing technical support.
• Ensuring the proper operation of the WhatsApp Business Platform, email delivery services and other integrations.
• Improving user experience and analysing system performance.
• Fulfilling legal obligations and billing processes.

Data Security and Retention

Your data is protected with industry-standard SSL/TLS encryption protocols. Sensitive information is stored encrypted at the database level. The Company applies role-based access control (RBAC) to prevent unauthorised access. Service data is hosted in European Union data centres in Frankfurt, Germany.

Licence and Scope of Service

The Company’s software products are provided under a Software as a Service (SaaS) model. The Company grants the user the right to use the software for the duration of the subscription (licence). Ownership and copyright of the software belong entirely to the Company.

User Responsibilities

• The user is responsible for the accuracy of the data entered into the system and its compliance with applicable law.
• The user is responsible for the security of account credentials such as passwords.
• Copying the system through reverse engineering or attempting to access its source code is prohibited.

Service Interruptions and Updates

The Company may carry out updates without prior notice to improve system performance and address security vulnerabilities. Planned maintenance is scheduled, as far as possible, at times that do not affect the user experience.

Termination

The Company reserves the right to suspend or terminate the service if subscription payments are not made or the terms of use are violated.

Data Controller

Under Turkish Personal Data Protection Law No. 6698 (“KVKK”), CORATLAS BİLGİ TEKNOLOJİLERİ LIMITED ŞİRKETİ acts as the data controller.

Purpose and Legal Basis of Processing

Your personal data is processed on the legal grounds of entering into and performing a contract and fulfilling legal obligations. Processing is limited to digitalising your organisational management processes, managing member and customer records, planning appointments and events, and carrying out communication activities.

Transfer of Personal Data

Your personal data may be shared only with business partners required to deliver the service (cloud server providers, email and messaging services, public authorities) and with competent authorities where legally required. As service data is hosted in data centres in Frankfurt, Germany, this hosting constitutes a cross-border transfer under Article 9 of KVKK and is carried out in line with the safeguards set out in that article. Your data is never sold to third parties for commercial purposes.

Rights of the Data Subject (Article 11)

Under KVKK, every person has the right to apply to the data controller to:

• Learn whether their personal data is being processed,
• Request information if it has been processed,
• Request correction if it has been processed incompletely or inaccurately,
• Request the deletion or destruction of their personal data.

Contact and Data Requests

For questions about this policy, requests to delete your personal data or feedback on data security, contact us at [email protected] or via www.coratlas.com/contact.

The Company provides its software products under a Software as a Service (SaaS) model on an annual licensing basis. Due to the digital and instantly accessible nature of the services, the following rules apply to purchases and cancellations.

1. Refund Policy

• Licences are digital products made available to the user as soon as the purchase is completed.
• Under Consumer Protection Law No. 6502 and the Distance Contracts Regulation, services performed instantly in electronic form are excluded from the right of withdrawal; therefore, annual licence fees are not refunded once paid.
• A 30-day free trial is offered so that users can test the system. As purchases are made on the understanding that the system has been tested and accepted, refund requests based on dissatisfaction or change of mind after payment are not accepted.

2. Subscription Cancellation

• An annual licence is valid for 365 days from the payment date. Users may cancel their subscription at any time.
• If a subscription is cancelled, access continues until the end of the current annual period; no partial refunds are made for used or unused periods.
• Users who do not wish to renew at the end of the annual period must notify the Company through the system or at [email protected] at least 15 business days before the end of the period.

3. User Data

If a subscription is cancelled or expires, user data is retained for the legally required periods. Users are responsible for exporting their data before the subscription ends. Access to data may be restricted after the service ends.

4. Force Majeure and Technical Issues

Except for major technical defects in the software that cannot be resolved, issues arising from the user’s own hardware, internet connection or incorrect use do not constitute grounds for refund or cancellation.