1. Data We Collect
We may process account details such as name, email address, phone number, and an optional profile photo; listing details (title, description, type, price); in-app messages; report/complaint records; and support requests. For app security and service quality, device and usage information, session information, crash/error logs, page views, and similar product analytics data may be processed anonymously or in as limited a form as possible. We also process in-app behavior data tied to your account: which listings you view, save, message about or publish, and your search terms.
2. How We Use It
We use this data to create and manage accounts, run phone/email verification, publish and rank listings, enable in-app messaging between buyer and seller, reduce security and fraud risks, detect scalping and rule-violating listings, respond to support requests, comply with legal obligations, and improve Devirly. From your in-app behavior data we build a profile of your interests; order the home feed by it; and notify you about new listings that may interest you and about a price drop on a listing you viewed, saved or messaged the seller about. These notifications can be turned off in your notification settings. Raw behavior signals are kept for at most 180 days; your profile is deleted with your account.
2.1 Public Publication of Your Listings
Your listings are shown not only to app users but to anyone on devirly.com, without signing in, and they may appear in search engines. Publicly visible: the listing title and description, category, price details, event date, venue, city, the photos you attached, and your masked name as the seller (in the form "Bur*** Ç."), plus your rating, review and completed transaction counts and phone-verification badge where available. Not publicly visible: your full name, phone number, email address, profile photo, or the view and save counts of your listing. Nobody can reach you through those pages; contacting a seller is only possible from inside the app, while signed in. When a listing is sold or expires it stays visible for 60 days, marked as no longer available, so shared links do not break; after that it is removed. If you remove the listing yourself, if your account is suspended, or if you delete your account, it leaves the public surface immediately. Search engines may retain copies of pages they previously accessed; removing those copies is outside Devirly's technical control. We strongly advise against putting personal details, or a readable barcode or QR code from your ticket, into the description or the photos: that content is published publicly.
3. Content Moderation
Listing and message content may be reviewed to detect rule violations, using automated (pattern-based and AI-assisted) and, where needed, human moderation. Violations such as third-party account/identity sales and sharing of usernames, passwords, OTPs, or recovery codes may be blocked at send time; detected violations may lead to listing removal, message blocking, and account restriction. Moderation records are retained for a limited period for security and appeal processes. You can appeal a moderation decision through the support channel.
4. Our Role in Payments
Devirly does not act as a payment intermediary between buyer and seller and does not provide escrow, wallet, IBAN collection, or card storage services. Devirly's revenue model is based on listing rights and listing packages. These purchases are processed through the Apple App Store or Google Play and are subject to the relevant store's payment and refund policies.
5. Data Sharing
We do not sell your personal data to third parties for marketing. Data may be shared with service providers such as cloud hosting, notifications, analytics, error tracking, and email/SMS delivery, only to the extent the service requires. Records may be shared with competent public authorities, courts, or law enforcement upon a lawful request.
6. Data Retention
Your account and service data are retained while your account is active. When you delete your account, it is anonymized or deleted on the backend; data required to be deleted is removed from our systems within a reasonable period. Records subject to legal retention, security, fraud prevention, dispute, or audit obligations may be kept for the required period with restricted access.
7. Your Rights (including under Türkiye's KVKK)
Under applicable data protection law, including Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK) where relevant, you may request to learn whether your data is processed, obtain information about it, learn the purpose of processing and whether it is used accordingly, know the third parties to whom it is transferred, request correction of incomplete or inaccurate data, request deletion or destruction, request that these actions be notified to transferred third parties, object to a result arising solely from automated processing, and claim compensation for damages. See the KVKK Privacy Notice for details.
8. Cookies and Web Analytics
The mobile app does not use browser cookies. The devirly.com website may use essential cookies for core site functions. If analytics or marketing cookies are used, user consent and cookie preference management are applied separately.
9. Contact
For privacy and data requests, reach us at support@devirly.com or use the form on our support page. Account deletion and data export requests can be made in-app or through the relevant forms on devirly.com.