Privacy Policy

1. Scope

This Privacy Policy explains how ilkkod collects, uses, stores, and shares personal data when you visit the website, contact us, request a project scope, or use a public tool we publish.

This policy reflects the current operating context of a Turkey-based web design, web development, SEO, content, and practical AI integration business. It is an explanation of how we work, not legal advice for every possible data-processing scenario.

2. Data Controller

For the website and inquiry flows described on this page, ilkkod acts as the data controller.

3. What We Collect

Depending on how you interact with the site, we may collect the following categories of data:

3.1 Contact and inquiry data

• Name and surname
• Email address
• Phone number
• Company name if you choose to share it
• Message content, project scope notes, and follow-up context

3.2 Project-scope and analysis request data

• Business goals, delivery expectations, and priority areas
• Budget range or commercial constraints you choose to share
• Operational notes about website, SEO, customer flow, or AI needs

3.3 Technical and usage data

• IP address and basic device/browser information
• Visited pages, session timing, and interaction signals
• Referral source or campaign context where analytics is enabled

3.4 Shop Purchase Data

When you buy a digital product through /shop (or /dukkan on the Turkish site), we collect additional data to process payment and deliver the product:

• Turkish National ID (TCKN): collected only because Turkish tax law requires it on the e-invoice (e-fatura/e-arşiv) we must issue for the sale. It is not used for any other purpose.
• Billing address, city, postal code, and contact details (name, email, phone): used to issue the invoice and deliver the product you purchased.
• Order and delivery records: which product you bought and when, plus download/license-key access history (download count and last-access time).
• Distance Sales Agreement / withdrawal-right consent record: a snapshot of the contract text you were shown and the product, price, and timestamp of your consent, kept as proof of what you agreed to.

Payment sub-processor: your card details never reach our servers and are never stored by us. Payments are processed by iyzico (İyzi Ödeme ve Elektronik Para Kuruluşu A.Ş.), a PCI-DSS compliant payment institution acting as a data processor/sub-processor for this transaction. Sensitive payment data (card number, expiry, CVC) is handled directly by iyzico and never written to our database.

Retention: order, delivery, and consent records are kept for the same period as invoicing/accounting records (see Section 9). Download links expire a limited time after purchase and are automatically disabled afterward — this does not delete the underlying order record.

4. Chrome Extension Data Use

The ilkkod yapay zeka görünürlük testi Chrome extension is designed around a narrow, on-demand use case.

• No broad tracking: We do not build a browsing history profile or monitor general web activity.
• On-demand analysis only: The extension reads the active tab only when you explicitly trigger an analysis.
• Temporary processing: Technical content from the page may be sent to our servers to generate an analysis result, then is not stored as a persistent personal profile.

5. Why We Process Data

• To respond to contact requests and project inquiries
• To prepare scope suggestions, proposals, or analysis responses
• To operate, secure, and improve the website
• To understand traffic and usage patterns where analytics is enabled
• To comply with legal, accounting, or record-keeping obligations

6. Legal Bases

Depending on the interaction, we rely on one or more of the following bases:

• Your consent where a consent-based action is required
• Steps requested before entering into a contract
• Performance of an agreement once a project starts
• Legitimate interests such as security, site maintenance, and basic analytics
• Legal obligations that apply to records, invoicing, or compliance

7. Cookies and Similar Technologies

We use cookies and similar technologies for essential website behavior, preference storage, analytics, and marketing measurement where enabled. For more detail, see the Cookie Policy.

8. Sharing with Third Parties

We may share limited data with third parties when it is necessary to run the website or deliver a service, such as hosting providers, email delivery tools, analytics providers, or project-specific service suppliers.

• Infrastructure and hosting providers
• Email, analytics, and communication tools
• Payment or accounting providers if a commercial relationship starts
• Authorities or legal processes where disclosure is required

9. Retention

We retain data only for as long as it is needed for the stated purpose or to meet legal and accounting obligations.

• Contact and inquiry data: typically up to 12 months if the conversation does not progress
• Project and contractual records: for the project duration and any legally required archive period
• Analytics data: according to the retention settings of the relevant provider

10. Your Rights

You can request access, correction, deletion, restriction, or objection depending on the applicable legal framework and the context of the processing. If your request concerns data handled under Turkish law, we review it in line with KVKK obligations.

For privacy requests, email info@ilkkod.com.

11. Security

• HTTPS and transport-layer encryption
• Access controls for internal systems and records
• Routine software and dependency updates
• Scoped access to proposal, inquiry, and project data

12. Children

This website is not intended for children. We do not knowingly collect personal data from minors through the public website.

13. Changes to This Policy

We may update this page when the website, tools, providers, or legal requirements materially change. The latest revision date will always be shown at the top of the page.

14. Contact

If you have questions about this Privacy Policy or a specific data request, contact: