Privacy Policy

The data controller for the personal data described on this page is:

{{FIRMA_UNVANI}}
Address: {{ADRES}}
E-mail: {{EPOSTA}}
Phone: {{TELEFON}}
Registered electronic mail (KEP): {{KEP_ADRESI}}

Since sosyalasistan.app is visited, it begins to collect information that can be obtained from your browser. This information includes:

• Internet Protocol (IP) Address
• previous URL before logging in to the site
• Browser and platform type (e.g. Windows platform, Chrome browser)
• Browser language
• Undeleted cookies belonging to us in your browser
• Text and information in all input which the site used.
• Country, region, city, and province information where your IP address is located.

Sosyalasistan retains all of the historical data indefinitely and publishes these information without restraint in the site.

Sosyalasistan.app keeps indefinitely all received information (excluding personal information) and reserves the right to share with third parties.

Sosyalasistan.app doesn’t share users’ personal information with 3rd parties excluding legal actions and respects privacy of user information.

It does not guarantee the reliability of any site you clicked or are redirected because the data in the site are collection and sosyalasistan.app can not be held under suspicion in case of any problem.

Sosyalasistan.app took precautions against major hacking methods for users’ (you) safety. However, no system is 100% reliable. Your passwords are encrypted by 64 bit irreversible and is not used anywhere within the site and is not shown, including session information.

Name, last name, phone and e-mail address users (you) gave for site membership is considered personal information.

In addition to the general browsing information listed above, Sosyalasistan collects the following data as part of providing the social media management, WhatsApp/Instagram messaging, and SEO/content tools ("the Service"):

• Account data: name, last name, e-mail address, phone number, password (stored hashed, not reversible), two-factor authentication secret (if you enable 2FA), preferred language, timezone, profile logo, and account type.
• Business / company profile data: company title, business e-mail, business phone, address, country, timezone, brand logo and color, WhatsApp Business number, and the brand profile fields you fill in for your company (e.g. brand theme, custom offerings).
• Connected social account credentials: when you connect a social media or messaging account (e.g. Facebook, Instagram, LinkedIn, WhatsApp Business API) to Sosyalasistan, we store the account identifier and the access token/secret issued by that platform so Sosyalasistan can publish content or send/receive messages on your behalf. These credentials are stored in our database and are not displayed back to you in plain text.
• Your end customers’ messages: if you connect a messaging channel (currently WhatsApp), the messages your customers send to your connected number — sender/recipient identifier, message text, message type, and any attached media reference — are stored so you can view and reply to them inside the panel.
• Raw external platform payloads: the raw webhook/API data received from, or sent to, connected third-party platforms is archived for troubleshooting, delivery-failure diagnosis, and audit purposes. Authentication secrets found in these payloads (e.g. signature headers, API keys, cookies) are stripped or hashed before storage.

• To create and operate your account and business profile.
• To publish the content you create to the social media / messaging accounts you connect.
• To receive, store, and let you respond to messages your end customers send to your connected WhatsApp (and other messaging) accounts.
• To generate content suggestions (post text, blog text, images) using AI providers, as described below.
• To secure your account (login, two-factor authentication, abuse prevention) and to troubleshoot integration/webhook problems.
• To comply with legal and regulatory obligations.

Account and business profile data is kept for as long as your account is active, and for a limited period afterwards where required by law or for legitimate business record-keeping.

Raw external platform payloads (the webhook/API archive described above) are kept for 90 days from the date they are received. After this period, the personal-data fields inside the archived payload (e.g. customer identifiers, message content) are anonymized; non-personal technical fields may be retained longer for statistics and reliability monitoring.

Sosyalasistan shares data with the following categories of third parties, only to the extent necessary to provide the Service:

• AI content-generation providers: when you use an AI-assisted content feature (post composer, blog composer, image tools), the relevant text and, where applicable, images are sent to our AI providers — currently Anthropic (Claude), OpenAI, Google (Gemini), Runware, Replicate and fal.ai, used in this order: if one does not respond, the next one is used — to generate the requested content.
• Social media / messaging platforms: the accounts you connect (e.g. Facebook, Instagram, LinkedIn, WhatsApp Business API) receive the content you choose to publish and the messages you choose to send, subject to each platform’s own terms and privacy policy.

We do not sell your personal information to third parties.

You may request access to, correction of, or deletion of your personal data at any time.

To request deletion of your account data, contact us using the details below. Verified deletion requests are reviewed and executed through our internal data-erasure workflow.

If you are a business using Sosyalasistan ("you", the customer business), please note the following important distinction:

• Your own account data (described above) is processed by Sosyalasistan as the data controller — we decide how and why it is processed in order to provide you the Service.
• Your end customers’ data — for example, messages your customers send to your connected WhatsApp or Instagram account, and their phone numbers/identifiers — is processed by Sosyalasistan only on your behalf and on your instructions, strictly in order to deliver, store, and display these messages to you inside the panel. In this relationship, you (the business) are the data controller for your end customers’ personal data, and Sosyalasistan acts only as a data processor.
• As the controller of your end customers’ data, you are responsible for having a lawful basis to communicate with them and for responding to any data-subject requests they make directly to you.

For any question about this Privacy Policy, or to exercise your data rights, contact us at {{EPOSTA}}.

Arrangements like adding, extracting on Privacy Policy can be made and user will be informed by indicating this arrangement in the site.