Privacy Policy | Radikal Hesap

In short

Radikal Hesap is a web program in which businesses keep their pre-accounting records. This page explains in plain language which personal data we (Radikal Teknoloji) process, why, and what your rights are.

The text is prepared according to the general principles of data protection law such as Turkey’s Personal Data Protection Law no. 6698 (KVKK) and the European Union General Data Protection Regulation (GDPR).

Data controller and data processor

There are two roles. For the information we use to open your account, log you in, take payment and give support (name, email, company name, subscription and payment records) the data controller is Radikal Teknoloji.

For the business data you enter into the program (your customers, suppliers, invoices, staff and so on) you, that is your company, are the data controller. We store and process this data only on your behalf and to provide the service; in other words we act as a data processor. Information and legal-basis obligations toward your customers belong to your company.

What data do we process?

Account details: full name, email, an irreversible hash of your password (we do not store the password itself), company name, country, currency, time zone, language preference.
Usage and security records: login history (login time, IP address and browser information), failed login attempts and action history (who changed what and when).
Subscription and payment records: payment amount, date and status. Your card details are entered on the payment provider’s secure payment page; the card number, expiry date and security code are not stored in our systems.
Support messages: messages you send us from the Support section or by email.
Your business data: the customer, product, invoice, payment, expense and similar records you enter into the program.

Why do we process it?

Forming and performing the contract: opening the account, running the program, managing the subscription.
Legal obligation: keeping payment and subscription records for the legal period.
Legitimate interest: ensuring security, preventing abuse, finding and fixing errors; detecting and preventing unauthorised access using login history.
We do not send marketing emails; if we decide to, we will ask for your explicit consent separately.

Who do we share data with?

We do not sell your data. We share it only with parties needed to provide the service: the licensed payment institution, our server and email infrastructure providers, and competent authorities when a legal obligation arises.

Your data may be transferred to the countries where these providers are located. If a transfer is made, the measures required by law are taken.

How long do we keep it?

Trial accounts that have not paid, and the data in them, are deleted 90 days after the trial ends.
Accounts that have paid once are kept until you ask us to close them. You can send an account closing request from the Support section or by email.
Login history is kept for 400 days, then deleted.
Records of a payment or invoice nature may be kept separately for the legal retention periods.
Even when your subscription ends, your data is not deleted at once; when you pay you carry on where you left off.

Security

Each company’s data is kept separately and one company cannot access another’s data. Authorisation is enforced on the server and staff can access only what the company owner has granted. Important actions are written to an audit trail. No system is entirely free of risk; if a data breach occurs we will inform you in line with our legal obligations.

Your rights

Under KVKK and GDPR you have the following rights regarding your own personal data:

To learn whether your data is processed and to request a copy,
To ask for incorrect data to be corrected,
To ask for your data to be deleted or your account to be closed,
To object to processing and ask for processing to be restricted,
To ask for your data in a portable form to move to another service,
To complain to the competent data protection authority.

How can you reach us?

You can send your requests from the Support section in the program or to the email address on our Contact page. After verifying your identity, we reply within the time limits set by law.

Changes

We may update this text from time to time. If there is an important change, we will tell you in the program or by email. The current version is always on this page.