Privacy Notice (KVKK)

Last updated: 2026-06-18 · Status: draft — to be reviewed by licensed counsel before launch.

This is an English summary of our Turkish-law (KVKK) privacy notice; the Turkish version prevails in case of any discrepancy.

1. Data Controller

This notice is provided under Article 10 of Turkey's Law No. 6698 on the Protection of Personal Data ("KVKK") by the following data controller:

Legal entity	AKD Havacılık Tarım Haritacılık Arge Yayıncılık Pazarlama Sanayi Ticaret Limited Şirketi
Brand	Peerfect (peerfect.co)
Address	Aksu Mah. Yurt Sok. No: 165, OMÜ Teknopark, Atakum / Samsun
Tax office / no.	Gaziler T.O. / 0201278299
MERSİS no.	0020127829900001
Registered e-mail (KEP)	akdhavacilik@hs01.kep.tr
Contact	kvkk@peerfect.co · hello@peerfect.co

2. Personal Data Processed

Identity & contact data: e-mail, optional full name, optional ORCID.
Content data: the manuscript text, abstract and metadata you upload.
Transaction & usage logs: session, IP address, browser/device info, error telemetry.
Customer transaction data: records of subscription/credit purchases (payment is processed via PayTR; we do not store your card details).

3. Purposes & Legal Grounds

Providing the service (manuscript evaluation, journal recommendation, account management, authentication) — KVKK Art. 5/2-c (performance of a contract).
Service security, abuse prevention, error detection — KVKK Art. 5/2-f (legitimate interest).
Legal obligations (invoicing, financial records) — KVKK Art. 5/2-ç.
Optional quality evaluation and commercial electronic messages (marketing) — only with your explicit consent (Art. 5/1), separately for each purpose.

Transactional/service e-mails (password reset, maintenance notices, account status) fall under the Art. 6 exception of Law No. 6563 and do not require separate consent.

4. Cross-Border Transfer (KVKK Art. 9)

Due to the technical infrastructure of the service, some data (e.g. technical data such as IP, backups) may be processed/stored by infrastructure providers located outside Turkey. A cross-border transfer therefore takes place. Main recipient groups:

Recipient / provider	Location	Function
Hetzner Online GmbH	Germany (EU)	Application server, database, file storage
Cloudflare, Inc.	USA / global edge	CDN, DNS, security (IP/traffic)
Amazon Web Services (S3)	EU (eu-central-1)	Nightly database backup
jsDelivr (CDN)	Global edge	Font/icon files (IP)
PayTR Payment Services	Turkey + card networks (Visa/Mastercard)	Payment collection

These transfers follow the order set by KVKK Art. 9 (as amended by Law No. 7499 of 12.03.2024): first to countries with an adequacy decision declared by the Board; absent that, where appropriate safeguards are provided (standard contractual clauses, binding corporate rules, or a written undertaking + Board authorisation); and exceptionally in the incidental cases under Art. 9/6. No separate explicit consent is sought for systematic infrastructure (hosting/CDN) transfers; these rely on the safeguards above.

5. Your Rights (KVKK Art. 11)

You may exercise your rights to access, rectification, erasure, restriction of processing, learning about transfers, portability and objection via kvkk@peerfect.co. For consent-based processing you may withdraw your consent at any time.

6. Retention & Deletion

If you delete a manuscript, its content is removed from our database within 24 hours and from backups within 30 days. You can delete your account from Settings; this cascades to all related manuscripts, runs and reports.

This text is being updated together with the related cookie, privacy and distance-sales documents; it will be reviewed by a licensed Turkish lawyer before launch.