Calling AI App Privacy and Personal Data Protection Policy

1.1. In General

Ensuring the privacy and security of your personal data is among our top priorities as CALL AI TECH YAZILIM VE YAPAY ZEKA TEKNOLOJİLERİ ANONİM ŞİRKETİ (hereinafter referred to as “CALL” and/or “Company”). The process and intended goal governed by this Privacy and Personal Data Protection Policy (“Policy”) and other written policies within our Company is to ensure the lawful processing and protection of personal data belonging to the processed persons (“Personal Data Subjects”) and to inform the Personal Data Subjects.

1.2. Purpose and Scope of the Policy

The main purpose of this Policy is to explain our Company's personal data processing activities conducted in compliance with the law and the systems adopted for personal data protection, thus informing Personal Data Subjects. The scope of this Policy covers all personal data of Personal Data Subjects processed by total or partial automatic means, or by non-automatic means as part of a data recording system.

1.3. Enforcement of Policy and Corresponding Legislation

This Policy has been formulated concretizing the principles put forward by relevant legislation. If there is a discrepancy between current legislation and this Policy, our Company undertakes and agrees that the applicable legislation will naturally supersede the Policy.

Explicit Consent:

Consent to a particular subject grounded on complete information and expressed freely.

CALLING AI:

CALLING AI Application provided to users by CALL AI TECH YAZILIM VE YAPAY ZEKA TEKNOLOJİLERİ ANONİM ŞİRKETİ.

Constitution:

1982 Turkish Republic Constitution.

Anonymization:

Making personal data entirely anonymous, meaning it cannot be associated with any identified or identifiable living person even by matching with other data.

Employee:

Interns and personnel of CALL AI TECH YAZILIM VE YAPAY ZEKA TEKNOLOJİLERİ ANONİM ŞİRKETİ.

Employee Candidate:

Real persons who have applied for employment at CALL AI TECH YAZILIM VE YAPAY ZEKA TEKNOLOJİLERİ ANONİM ŞİRKETİ through any means or provided a CV/relevant details.

Personal Data:

Any information relating to an identified or identifiable natural person.

Personal Data Subject/Relevant Person/User:

The natural person whose personal data is processed.

Processing of Personal Data:

Any operation performed upon personal data such as collection, recording, storage, retention, alteration, re-organization, disclosure, transferring, taking over, making retrievable, classification or preventing the use thereof, fully or partially via automatic means or non-automatic means provided that these are part of a data recording system.

Board:

Personal Data Protection Board.

Authority:

Personal Data Protection Authority.

KVKK:

Personal Data Protection Law No. 6698.

Special Category Personal Data:

Data relating to race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance and dress, membership of association, foundation or trade union, health, sexual life, criminal conviction and security measures, and biometrics and genetics.

Periodic Destruction Process:

The erasure, destruction, or anonymization process which will be repeated ex officio according to intervals specified in the storage and destruction policy assuming all conditions for processing personal data specified by law have vanished.

Policy:

CALL AI TECH YAZILIM VE YAPAY ZEKA TEKNOLOJİLERİ ANONİM ŞİRKETİ Privacy and Personal Data Protection Policy.

Data Controller Application Form:

Form intended to be utilized by personal data subjects exerting their rights under KVKK Article 11.

Data Processor:

The natural or legal person who processes personal data on behalf of the data controller upon their authorization.

Data Recording System:

Information system where personal data is processed according to determined criteria.

Data Controller:

The natural or legal person determining the purposes and means of personal data processing, responsible also for the establishment and management of the data recording system.

3.1. Lawful Processing

3.1.1. Processing that Accords with Legality and Fairness: Our Company adopts acting in accordance with the law and honesty as a fundamental principle across all personal data operations and ensures transparency regarding the usage purposes of collected personal data.

3.1.2. Guaranteeing Correctness and Keeping Fresh Where Needed: In handling personal data, our Company accommodates systems providing for the certitude and timeliness of processed entries. In this context, owners may ensure continuous exactness and actuality by reaching out to our Company.

3.1.3. For Fixed, Evident, and Sensible Intents: Our Company sets explicitly recognized objectives that correspond perfectly within fair and legitimate boundaries.

3.1.4. Contextual, Delimited, and Proportionate: The handled amounts correspond proportionally merely covering indispensable targets aligning properly with organizational undertakings.

3.1.5. Held Exclusively Only Extent Desired Under Law or Necessary Time Frame: Our Company preserves personal data strictly abiding by legally delineated bounds or, should absolute deadlines lack, corresponding exclusively towards fulfillment of immediate objectives underpinning originally authorized extraction.

3.2. Limited Processing Relying Exclusively Upon Guidelines Stipulated Within KVKK Art. 5

Our Company treats personal data reliant upon clear consent except underneath explicitly prescribed circumstantial exclusions permitting alternative legitimate processing frameworks. Exceptions where explicit consent is unneeded include:

1. a)Existing legislative dictate,
2. b)Practical impossibility regarding procuring expression of permission,
3. c)Contract executions requiring immediate data referencing,
4. d)Obligations upon the company,
5. e)Voluntary subjection revealing private data,
6. f)Asserting lawful protection spanning a right,
7. g)Pursuit of business interests harmless towards liberties and freedoms of subjects.

3.3. Transacting Sensitive Personal Data

We handle data identified as sensitive with explicit care. Processing happens generally via explicitly stated permission unless legislated. Safeguards stipulated explicitly by Data Boards naturally apply beforehand. Other circumstantial nuances allowing processing cover matters related towards health protocols enacted through confidentiality frameworks.

3.4. Routing Transmissions

We forward personal entries facilitating organizational duties towards shareholders, supervisory frameworks, legitimate governmental structures, partnered establishments/agencies enforcing cooperative ventures alongside remote storage suppliers matching conditions enumerated under articles 8 and 9 of KVKK.

Our structural, systemic, and physical safeguards encompass preventing unpermitted interference along with robust organizational training routines establishing stringent oversight mitigating any vulnerabilities guaranteeing complete conformance shielding user details. Specialized data structures enjoy cryptographically protected avenues averting compromise.

Specifically structured organizational awareness regimes further propagate conscientious administrative responsibility minimizing noncompliant possibilities enforcing contractually bound non-disclosure covenants across handling associates.

Our Company places great importance on data subject rights. A Data Controller Application form has been established on our website for easy request submission.

Everyone, by applying to our Company, has the right to:

1. a)Learn whether their personal data is processed,
2. b)Request information if it has been processed,
3. c)Learn the purpose of processing and its appropriate use,
4. d)Know third parties data is transferred to,
5. e)Request correction for incomplete/inaccurate data,
6. f)Request deletion/destruction within KVKK Art. 7 frameworks.

Users can start an account deletion request in the CALLING AI app by going to Profile / Settings > Delete Account. If in-app access is not available, the same request can be sent to [email protected] from the e-mail address associated with the account.

When an account deletion request is completed, the user account, application access, and personal data related to service usage are deleted or anonymized. Records that must be retained for invoicing, accounting, payment, security, or legal obligations may be kept for the period required by applicable legislation.

Applications are typically free and responded to swiftly within 30 days unless subject requests impose extra operational costs designated via respective regulatory tariffs.

Address:

www.callingai.app

Conforming to KVKK article 10, our Company transparently disseminates insights tracking acquisition through accessible mediums including this Policy acting as a supplementary Disclosure Text.

Upon exhausting legally defined operational requirements or resolving retention necessities preventing destruction, our Company obliterates respective information complying uniformly across deletion frameworks halting future exploitation effectively.

CALLING AI accesses the Gmail / Google Workspace mailbox that the user has explicitly connected, using Google OAuth. With this access, it only reads emails that arrive in the mailbox, and sends, from that same mailbox, the replies prepared by the email assistant and the template emails the user initiates from the portal. Email content is stored so that it can be shown in the user's conversation history in the portal and so that replies can be written, and it is processed only for this purpose by the AI models of our service providers. Access tokens are stored encrypted. Google user data is not used for advertising, is not sold, and is not used to train generalized AI models. It is not shared with anyone except as necessary to provide the service, for security, and to meet legal obligations. The user can remove the connection in the portal at any time and can revoke access from their Google account settings.

Calling AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

CALL AI TECH YAZILIM VE YAPAY ZEKA TEKNOLOJİLERİ ANONİM ŞİRKETİ

Address:

Barbaros Hayrettin Paşa Mah. 1993.Sk. No:22A Inner Door No:121 Esenyurt/Istanbul

Mersis No:

0771-0708-5090-0001

Website:

www.callingai.app

E-Mail Address:

[email protected]

Phone Number:

+90 212 706 90 01