Privacy & KVKK Policy

1. Data Controller Identity

Under Turkey's Personal Data Protection Law No. 6698 (KVKK), the data controller is AZEEMİ TECHNOLOGİES VE DIŞ TİCARET LİMİTED ŞİRKETİ, located at GÜNEŞTEPE MAH.ANİBAL SK.NO:2/6 GÜNGÖREN, ISTANBUL. We are fully committed to protecting the privacy of our workers (candidates) and employers.

2. Personal Data We Collect & Process

We collect personal data that you voluntarily provide when registering an account, building a profile, or communicating via the platform:

• Workers (Candidates): Full name, corporate/personal email, city of residence in Turkey, work authorization status, language skills and CEFR self-declared levels, skill tags, salary expectations, profile photograph, CV/Resume document (PDF format), and an optional 60-second video introduction (containing voice and physical image).
• Employers (Company Representatives): Full name, work email address, company name, corporate domain, website URL, and office location/city.
• Billing Information: Employers' subscription status, payment history, customer portal actions, and billing identifier keys. Note: Support Echo does not store raw credit card details; all billing transactions flow through secure, certified PCI-DSS compliant third-party payment processors.

3. Purposes and Legal Grounds of Processing

In compliance with KVKK Article 5 and 6, your personal data is processed under the following legal bases:

• Your Explicit Consent: Obtained at signup for storing profiles and sending CV files to third-party processors, and toggleable for automatic CV parsing.
• Contractual Obligation: Processing necessary for providing core platform matchmaking, inbox messaging, and account management.
• Legitimate Interests of the Controller: Performing platform analytics, verifying corporate email domains, and preventing platform abuse or double checkouts.

4. Third-Party Sub-Processors & Data Transfers

To provide a premium and automated SaaS experience, personal data is transferred to specialized third-party cloud infrastructure. All services are selected for strict compliance and localized within the European Union (EU) where possible for KVKK alignment:

5. Right to Erasure (KVKK “Right to be Forgotten”)

We believe you should have absolute control over your personal information. Support Echo provides an instant, self-serve account deletion mechanism for Workers:

Instant Wipe Guarantee:When you navigate to your profile settings and click “Delete My Account,” Support Echo instantly deletes your entire Postgres database record and triggers a recursive API request to Cloudflare R2 to delete your profile photo, CV file, and video intro from our cloud storage. No backup retention, no delay.

6. Rights of the Data Subject under KVKK Article 11

As a data subject, you are entitled to exercise the following rights by contacting us under Article 11 of the KVKK:

• Learn whether your personal data is being processed.
• Request information as to processing if your data has been processed.
• Learn the purpose of the processing and whether data is used in accordance with that purpose.
• Know the third parties in Turkey or abroad to whom your personal data has been transferred.
• Request correction of your personal data if it has been processed incompletely or inaccurately.
• Request the deletion or destruction of your personal data under the conditions laid down in KVKK Article 7.
• Object to any negative consequences resulting from analyzed data processed exclusively through automated systems.
• Demand compensation for damages suffered due to unlawful processing.