Identity of the Data Controller
KefStacks Technologies ("Company"), in its capacity as data controller under Law No. 6698 on the Protection of Personal Data ("KVKK"), processes your personal data within the scope explained below.
- Address:
- Cumhuriyet Teknokent – Yenisehir Kardesler St. No: 7/2 B Block, 58070 Merkez/Sivas
- Email:
- info@kefstacks.com
Categories of Personal Data Processed
- Identity Data: Name, surname
- Contact Data: Email address
- Customer Transaction Data: Order, payment, invoice/credit history
- Transaction Security Data: IP address, log records, session info
- Content Data: Created characters and stories
Purposes of Processing Personal Data
- Carrying out membership registration and management processes
- Carrying out contract processes (credit package purchase, service delivery)
- Carrying out information security processes
- Carrying out storage and archival activities (legal obligations)
- Conducting activities in compliance with legislation
- Carrying out communication activities (support, notifications)
- Carrying out activities for customer satisfaction
Transfer of Personal Data
Your personal data may be shared with the following parties under KVKK arts. 8 and 9:
- Payment Service Provider (iyzico): Required data is transferred to iyzico for payment processing.
- Cloud Infrastructure Providers: AWS/Azure/Google Cloud providers used for data storage.
- AI Model Providers: Providers like OpenAI/Anthropic for story generation (content anonymized).
- Authorized Public Authorities: Court/prosecutor requests in case of legal obligation.
Data Collection Method and Legal Basis
Personal data is collected electronically through the website and mobile application; processed based on the following legal grounds specified in KVKK art. 5:
- Mandatory for the establishment and performance of the contract
- Fulfillment of legal obligation
- Mandatory for the establishment, exercise or protection of a right
- Necessary for legitimate interests
- Explicit consent of the data subject
Your Rights Under KVKK Art. 11
Under Article 11 of the Law, you have the following rights:
- Learn whether your personal data is being processed
- Request information about its processing if any
- Learn the purpose and whether it is used in accordance with the purpose
- Know the third parties to whom personal data is transferred at home or abroad
- Request correction if processed incompletely or incorrectly
- Request deletion or destruction within the framework of KVKK art. 7
- Request notification of these operations to third parties to whom transferred
- Object to a result that arises against you through automated systems
- Claim damages if you suffer harm due to unlawful processing
Application Method
Pursuant to KVKK art. 13/1, to exercise your rights, you can apply to info@kefstacks.com with documents that establish your identity. Your application will be concluded within 30 days at most.
How to Exercise Your Rights in Practice
You can exercise your rights regarding your personal data through the channels below. Applications are concluded free of charge within the periods prescribed by law.
- You can view and update the information registered to your account from your profile page.
- To request a copy of your data, simply write to the email address on our contact page from the address registered to your account.
- You can request deletion of your account and associated data; once received, all data not subject to a statutory retention obligation is permanently deleted.
- If you believe the processing is unlawful, you may object and request that any resulting damage be remedied.
- If you are not satisfied with the outcome of your application, you retain the right to file a complaint with the Personal Data Protection Board.
We need to verify your identity before assessing your application, so please send your request from the email address registered to your account.
Processing of Information About Children
vopido processes limited information such as a child's name, age and interests for the sole purpose of personalizing a story. This information is used only to generate the story text, illustrations and audio narration.
Such data is never processed for advertising or profiling, never sold to third parties, and never added to marketing lists. The person creating the account and entering the data is the parent or legal guardian; the service is not offered directly to child users.
A parent or legal guardian may request deletion of information about a child at any time. On request, this data and any stories generated from it are removed from your account.