Personal Data Protection (KVKK)

This Privacy Notice is issued to inform data subjects, pursuant to Article 10 of the KVKK and the Communiqué on Principles and Procedures to Be Followed in Fulfilling the Obligation to Inform, about personal data processed while providing AISHE services.

It covers registration, authentication, ordering, payment confirmation, licence activation, support and security. It is not investment advice; it solely explains data-protection obligations.

Your personal data are processed for the following purposes and for purposes closely related thereto:

• Creating accounts, authenticating users and managing sessions
• Binding the AISHE System-Client licence to a device via Hardware-ID and completing activation
• Managing orders, invoicing, subscription/licence terms and trial periods
• Keeping payment confirmation records (card data are processed by the bank/payment infrastructure and are not stored on our servers)
• Handling support requests and ensuring service continuity
• Information security, preventing unauthorised access, and detecting fraud or abuse
• Complying with the Turkish Commercial Code, consumer-protection legislation and other applicable laws

In line with data minimisation, only data necessary to perform the service are processed:

• Identity / account: name or username (if provided), email address
• Transactional: order number, package/licence details, payment status, AISHE ID
• Technical: Hardware-ID, IP address, browser/device metadata, session and security logs
• Communications: support correspondence and related content
• Programme (optional): referral / affiliate codes and related records — only if you opt in

Data are collected electronically — automatically or partly automatically — via the app.aishe.pro / home.aishe.pro dashboards, registration and order forms, session records and the AISHE System-Client.

Primary legal bases (KVKK Art. 5):

• Art. 5/2 (c): Processing is necessary for the establishment or performance of a contract
• Art. 5/2 (a): Explicitly provided for by law
• Art. 5/2 (ç): Necessary for compliance with a legal obligation of the controller
• Art. 5/2 (f): Necessary for legitimate interests (security, service improvement), provided fundamental rights are not harmed
• Art. 5/1: Explicit consent — only for exceptional processing that requires consent (e.g. certain cookie/marketing preferences)

Your personal data are not sold for marketing. Transfers may be made, solely as necessary and purpose-limited, to:

• Competent public authorities and courts (upon lawful request)
• Hosting / infrastructure providers (to operate the service technically)
• Payment / banking infrastructure partners (for payment confirmation and financial processes)
• Email and operational notification services (for account and transaction notices)

Where transfers abroad occur, appropriate safeguards are applied in accordance with the KVKK and relevant Board decisions.

Personal data are retained for the period required by applicable law or by the processing purpose. When the purpose ceases or statutory retention ends, data are deleted, destroyed or anonymised under the KVKK and related regulations.

• Account and licence records: while the account is active, plus legal retention obligations
• Order / invoice records: periods required by commercial and tax law
• Security logs: a reasonable period for security and dispute resolution

Pursuant to KVKK Art. 12, appropriate technical and organisational measures are implemented to prevent unlawful processing and access and to ensure safekeeping. These include access controls, encrypted transmission, authorisation and logging. Absolute security of internet transmission cannot be guaranteed; users must also protect their account credentials.

Strictly necessary cookies may be used for session continuity, security and core functionality. Preferences for non-essential cookies can be managed via the cookie notice on the site.

As a data subject, you have the right to:

• Learn whether your personal data are processed
• Request information if they have been processed
• Learn the purpose of processing and whether it is used accordingly
• Know the third parties to whom data are transferred domestically or abroad
• Request correction of incomplete or inaccurate data
• Request deletion or destruction under KVKK Art. 7
• Request notification of correction/deletion to third parties to whom data were transferred
• Object to a result against you arising from analysis of processed data exclusively by automated systems
• Claim compensation for damage arising from unlawful processing

To exercise your rights, please send your request — preferably from your registered email — to info@ainengroup.com in a manner that allows verification of your identity. Applications are handled in line with the Communiqué on the Procedures and Principles of Application to the Data Controller and concluded within thirty days under KVKK Art. 13.

If your application is rejected, the response is insufficient, or no response is given in time, you may lodge a complaint with the Personal Data Protection Board (KVKK Board).

This notice may be updated due to legal or service changes. The current version is published on this page; material changes may be communicated by reasonable means. The “Last updated” date indicates the effective date.