Draft: this text has not yet been reviewed by a lawyer; company details are added before launch.

Privacy Notice

Last updated: 27 October 2026

This is an English translation provided for information. The Turkish version (KVKK Aydınlatma Metni) is the legally binding text; in case of any conflict, the Turkish version prevails.

This notice is provided under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"). It explains how we process the personal data of business representatives and team members who use the Viswoo service (the "Service"), and of people who contact us through our website.

1. Data controller

[Company name] ([Address]). Contact: [Email].

For the content that businesses publish on their screens (images, videos, text), the data controller is the business that uploads it; the Service provider acts as a data processor for that content.

2. Personal data we process

Identity: full name.
Contact: email address; if you left them in the website form, your phone number, business name and city.
Security: a one-way hash of your password (the password itself is never stored), the two-step verification key and hashes of recovery codes, session records, IP address, browser/device information, failed sign-in attempts.
Activity records: an activity log of actions taken in the dashboard (who, when, which action).
Customer transactions: business name and type, plan, payment records (amount, period, date). Card details are not stored by the Service.
Screen devices: the screens' IP address, device/browser information, online time and play records (this data usually cannot be linked to a person).

3. Purposes of processing

Creating accounts, authenticating users and keeping accounts secure,
Providing the Service: managing screens, distributing content, reporting,
Sending password resets, invitations, security notifications, offline screen alerts and subscription reminders,
Answering demo and contact requests from the website,
Billing and tracking subscription periods,
Preventing unauthorised access, detecting abuse and meeting legal obligations (e.g. records required under Turkish Law No. 5651).

4. Legal grounds

Your personal data is processed under KVKK Article 5(2) on the grounds that it is (c) directly related to the formation or performance of a contract, (ç) necessary for the data controller to meet its legal obligations, and (f) necessary for the legitimate interests of the data controller (account security, preventing abuse, responding to your request), provided this does not harm your fundamental rights and freedoms. Separate explicit consent is not requested for these purposes.

5. How data is collected

Data is collected electronically through sign-up, invitation and contact forms and while you use the dashboard, and automatically through technical information that screen players send to the server.

6. Transfers

To the extent necessary to provide the Service, personal data may be transferred to our hosting (server) provider and email delivery provider, only for service purposes and in line with KVKK Articles 8 and 9; and to authorised public institutions where required by law. If servers are located abroad, transfers are made with the safeguards set out in KVKK Article 9. Data is not shared with third parties for marketing. Our website does not use advertising or visitor tracking tools.

7. Retention periods

Account and team data: until the account is deleted. A closed account can be reopened within 30 days; at the end of that period its data is deleted permanently from the live system and from backups within a further 30 days at the latest. Personal details in activity logs are anonymised.
Website requests: 1 year.
Activity log: 1 year. Play and uptime records: about 13 months.
Sessions: up to 30 days; they end after 12 hours of inactivity.
Password reset, invitation and verification links: single-use; valid for between 30 minutes and 7 days.
Payment records: for the period required by applicable tax legislation.

8. Your rights (KVKK Article 11)

To learn whether your personal data is processed and, if so, to request information about it,
To learn the purpose of processing and whether it is used accordingly,
To know the third parties in Türkiye or abroad to whom it is transferred,
To request correction if it is incomplete or inaccurate, deletion or destruction under the conditions of KVKK Article 7, and notification of these actions to third parties it was transferred to,
To object to a result against you arising from analysis by automated systems,
To claim compensation if you suffer damage due to unlawful processing.

The business owner can download a copy of the data in the dashboard under Settings → Your data and close the account on the same page. For other requests, write to [Email]. Requests are answered free of charge within 30 days at the latest.