This notice was prepared to inform you about the processing of your personal data under Devirly's services, pursuant to Türkiye's Law No. 6698 on the Protection of Personal Data ("KVKK"). Version 2.3 · July 24, 2026 · Draft pending legal review.
Data controller: Burhan Cabiroğlu (natural person acting as data controller), operating under the "Devirly" brand. Contact: support@devirly.com · devirly.com support page. All requests under KVKK can be submitted through these channels; if a postal address is required for a written application, it will be provided to the applicant on request.
Identity and contact information (name, email, phone), account information, phone/email verification information, listing information, messaging records, support requests, report/complaint records, usage and transaction security records, purchase/credit information, and device/usage analytics data may be processed.
Data is processed for account management, identity/contact verification, publishing listings, messaging, support, security, fraud prevention, moderation of rule-violating listings, fulfilling legal obligations, managing purchase/credit entitlements, and improving service quality. To detect rule violations (e.g. third-party account/identity sales, password/OTP sharing), listing and message content is reviewed through automated (pattern-based and AI-assisted) and, where needed, human moderation; some infringing content may be blocked at send time. Moderation records are retained for a limited period for security and appeal processes.
Data may be shared, limited to the purpose, with hosting, notification, analytics, error-tracking, and email/SMS providers, and with the store platforms that process in-app purchases (Apple App Store, Google Play); and with competent public authorities where legally required. Personal data is not sold to third parties for marketing.
Data is collected through the mobile app, website, API services, support channels, and user actions, by automatic or partly automatic means. Legal bases under KVKK Article 5 include the establishment and performance of a contract, the data controller's legitimate interest, compliance with a legal obligation, the establishment, exercise, or protection of a right, and explicit consent where required.
Data is retained for as long as the processing purpose requires and for applicable statutory retention periods; at the end of that period it is deleted, destroyed, or anonymized. Account deletion and data export requests can be made in-app or through devirly.com.
You may request to learn whether your data is processed; obtain information if it has been; learn the purpose of processing and whether it is used accordingly; know the third parties to whom it is transferred domestically or abroad; request correction of incomplete or inaccurate data; request deletion or destruction under KVKK Article 7; request notification of these actions to transferred third parties; object to a result arising against you solely from analysis by automated systems; and claim compensation for damages caused by unlawful processing.
To exercise your rights, contact support@devirly.com or use the form on the devirly.com support page. Applications may require identity verification; additional information may be requested for security. Applications are resolved within the periods set by KVKK and applicable legislation.