KVKK Website Information Notice
Information for website visitors and people contacting Cayra from Türkiye.
Last updated: September 5, 2026
Data controller
For erpgpt.ai analytics and on-premises or enterprise requests, the relevant data controller is CAYRA YAPAY ZEKA TEKNOLOJİLERİ ANONİM ŞİRKETİ.
For Cloud and self-service requests handled by Cayra AI Inc., data may be transferred to the United States entity under the applicable legal mechanism.
- Trade Registry No: 536999
- Tax No: 2030912417
- MERSIS No: 0203091241700001
- Address: Üniversiteler Mah. 1596 Cad. Teknokent Kuluçka Merkezi Binası No: 6C, İç Kapı No: 10, Çankaya / Ankara, Türkiye
- Email: privacy@cayra.io
Personal data and collection method
Data is collected electronically when you visit a public page, set preferences or submit a form.
- Identity and contact data submitted in a form.
- Request subject, message and optional company information.
- IP address, browser/device information, timestamps and security logs.
- Consent-based analytics and browser preference records.
Purposes and processing conditions
- Operate and secure the websites.
- Route and answer requests.
- Take steps requested before a possible contract.
- Measure website use after consent.
- Meet legal obligations and protect legal rights.
Depending on the activity, processing may rely on explicit consent under KVKK Article 5(1), contract necessity under Article 5(2)(c), legitimate interest under Article 5(2)(f), or another applicable condition.
Recipients and international transfers
Data may be shared with the relevant Cayra entity and vendors used for website delivery, security, analytics, identity management or email delivery.
International transfers are made only through a mechanism permitted by KVKK Article 9 and with the required safeguards.
Retention
Data is retained only for the website purpose, request lifecycle, documented security or lead-retention period, and applicable legal requirements. It is then deleted, anonymized or access-restricted as appropriate.
Your rights and application
You may exercise the rights listed in KVKK Article 11 by applying to the relevant data controller. Applications are handled under KVKK Article 13. If the response is rejected, insufficient or late, you may complain to the Board under Article 14.
Product and customer data
This notice covers the public websites only. Product account, Cloud and on-premises processing is described in the signed-in product notice, DPA or enterprise order documents applicable to the selected service.