1. Data controller and contact
The data controller for the TubeDetect service is the company listed below. You can send requests about your personal data to the email or postal address shown.
- Company name
- OPS GRC DANIŞMANLIK VE BİLİŞİM LİMİTED ŞİRKETİ
- Registered address
- Barbaros Mah. Lale Sk. Ağaoğlu My Office No: 2 İç Kapı No: 13, Ataşehir / İstanbul
- [email protected]
- Tax office / Tax number
- Kozyatağı Vergi Dairesi Müdürlüğü / 4780841768
- MERSIS number
- 0478084176800001
- Trade registry
- İstanbul Ticaret Sicili Müdürlüğü / 138271-5
- Registered e-mail (KEP)
- [taslak — gerçek KEP adresi eklenecek]
- Phone
- [taslak — gerçek telefon numarası eklenecek]
- ETBIS registration
- [taslak — ETBİS kayıt bilgisi eklenecek]
2. Data we process and why
- The name and email address you provide when creating an account, sign-in and verification details and your preferences are used to open your account, provide secure sign-in and deliver service notifications.
- Brand Profile details, the account links you add for analysis, accessible platform content and the reports generated from them are processed to prepare the creator analysis you requested and to present it in your account.
- Credit movements, order amounts, payment status and transaction references are used to verify a purchase, assign your entitlements to your account and meet financial obligations.
- IP address, session and security records may be processed to prevent abuse, investigate errors and keep the system secure.
- Contact details and correspondence you share in support requests are used to review, answer and follow up on the request.
3. How data is collected and the legal grounds
Data is collected electronically through web forms, authentication flows, cookies, service records, payment notifications, platform integrations and the requests you send us. Depending on the purpose, processing relies on the establishment or performance of a contract, legal obligations, the establishment, exercise or protection of a right, and legitimate interests that do not harm your fundamental rights. Where explicit consent is required, a separate choice is collected.
Optional analytics and marketing email preferences are separate from the processing required to provide the service. You can change these preferences in your account.
4. Payment security and service providers
Your card details are collected on iyzico's payment screen; TubeDetect does not store your card number or card security code. The buyer details you enter in the payment form are sent to iyzico to create the payment request.
Data required by the service may be shared, within the purpose of that service, with suppliers providing payment, hosting, email, authentication, platform data and AI processing services. The main recipients and transfer purposes are:
- iyzico — buyer and order details to execute and verify the payment.
- Resend — email address and notification content to deliver account and report notification emails.
- Cloudflare — traffic and security data for domain, CDN and security services.
- Coolify — server and session data required for the service to run on the application hosting infrastructure.
Information may also be disclosed to public authorities legally entitled to it and to competent bodies in dispute processes.
External platform and AI services may use infrastructure located abroad. Transferring data abroad is a separate operation that must be assessed under Article 9 of the Turkish data protection law (KVKK); viewing this page or accepting the general terms does not by itself constitute explicit consent for a transfer.
6. Retention and account deletion
Data is kept considering the relevant service purpose and applicable legal retention obligations. An account deletion request closes sessions, public report share links and active monitoring. Physical deletion or anonymisation is carried out after assessing the retention obligations that apply to reports and financial records; creating a request does not mean that all records are erased immediately.
7. Your rights and how to apply
Under Article 11 of the KVKK you have the right to learn whether your personal data is processed, to request information if it has been processed, to learn the purpose of processing and whether it is used accordingly, to know the third parties to whom it is transferred domestically or abroad, to request correction of incomplete or inaccurate data, to request deletion or destruction under Article 7, to request notification of such correction or deletion to third parties receiving the data, to object to a result arising against you solely through automated analysis, and to claim compensation for damage caused by unlawful processing.
You can use the data rights screen in your account or write to [email protected]. Describe your account and your request; do not send card details, CVV or your password.