Privacy Notice

The data controller is Mustafa Akay LLC (Makaytron). Postal address: 30 N Gould St Ste R, Sheridan, Wyoming (WY) 82801, USA. You can contact us about your personal data at support@makaytron.com.

When you create an account or workspace, we process your name, email address, account and membership details, roles, and permissions. As you use the service, we process store connections, listings, designs, images, transactions, usage, and credit records. Support requests contain your contact details and message. Payment and billing information is processed for purchases; Stripe handles card payments.

We collect this data electronically through registration and support forms, content you enter or upload, actions you initiate, responses from services you connect with your authorization, and session, device, IP address, and security logs generated while operating the service. Optional analytics and advertising measurement data is collected only after your relevant choice.

Account, authorization, connection, and content data needed to operate your account, session, workspace, store connection, and selected product actions is processed under Article 5(2)(c) of the Turkish Personal Data Protection Law (KVKK), to the extent directly necessary to establish or perform a contract. Support requests related to the existing service rely on the same basis.

Payment, credit, and invoice records are processed under Article 5(2)(c) to complete a purchase and Article 5(2)(ç) to meet applicable recordkeeping and reporting obligations. Records necessary to establish, exercise, or protect a right may be retained under Article 5(2)(e).

Technical logs necessary for security and abuse prevention are processed under Article 5(2)(f) for our legitimate interests, provided your fundamental rights and freedoms are not harmed. The name, email, and message you submit through the general contact form are processed on the same qualified legitimate-interest basis to answer your inquiry.

Optional Google Analytics and Google Ads measurement takes place only with your separate choice, based on your explicit consent under Article 5(1). This choice is not required to create an account or use the core service, and you can withdraw it at any time. The Cookie Policy explains cookies and measurement in more detail.

Data needed to operate the service may be shared with hosting and authentication providers (Supabase); payment and related transaction data with the payment provider (Stripe); and data needed for connections you initiate with the connected marketplace (Etsy). If you select an artificial intelligence or image operation, only the input needed for that operation may be sent to the relevant provider.

Measurement data may be sent to Google Analytics or Google Ads to the extent covered by your separate choice. Where required by law or a valid request, necessary data may be disclosed to competent public authorities. Each disclosure is limited to the data needed for its purpose.

Account and workspace data is retained while needed to provide the service. Support and security records are kept as long as needed to resolve the relevant request or security incident; payment and invoice records are kept for applicable statutory retention periods. When an account closes or a processing purpose ends, data is deleted, destroyed, or anonymized unless another legal basis requires retention.

Retention depends on the data type, purpose, applicable legal periods, and the need to protect an ongoing right. Separate retention periods for optional Google measurement are described in the measurement section of this notice.

Under Article 11 of the KVKK, you may ask whether your data is processed, learn its purpose and recipients, request correction of inaccurate data or deletion where the conditions are met, and ask that these actions be communicated to recipients where the law provides. You may object to an adverse result based solely on automated processing and seek compensation for harm caused by unlawful processing.

Send your request to support@makaytron.com or the postal address above. We may ask for the minimum information needed to verify your identity. Your statutory application and complaint rights remain available.

Google Analytics 4 measures product use. Google Ads measures only consented conversions and remarketing. Search Console reports how pages available without signing in are crawled and appear in search. Google Cloud BigQuery stores the daily export of consented Analytics events in the European Union region.

With your consent, measurement can include a page identifier without personal details, predefined interaction and outcome details, engagement time recorded in ranges, and device or browser information. Ads consent permits ad click identifiers for attribution. A random pseudonymous user identifier is sent only to Analytics and never to Ads. This identifier can appear in BigQuery as part of the daily Analytics export.

Makaytron does not send email, phone, hashes of either, typed content, search terms, prompts, file names or paths, file hashes, listing or business-record fields, workspace, store or client identifiers, tokens, or raw errors to Google. Google Signals, demographic or interest profiling, and user-provided data features remain off.

Google Analytics event and user data is retained for no more than 14 months. BigQuery raw event tables expire after 420 days. Google Ads remarketing audience membership is limited to 30 days. The BigQuery export uses a European Union data region.

You can grant, reject, or withdraw Analytics and Ads consent separately through the preference center. Neither choice is required to access the service or your account. Submit an objection, access, or deletion request through Contact. Account deletion runs Analytics and BigQuery deletion steps before removing the pseudonymous identifier mapping.

Account, workspace, store, listing, design, image, connected artificial intelligence services, Stripe, support, audit, and log data is processed only for its product workflow. Shop access credentials are not shared with visitors. Credit and payment records are retained so transactions can be reviewed and support accountability. Support and administration access is limited by role and permission. These operational records are not forwarded wholesale to Google measurement.

The name, email, and message in the contact form are used only to process the request and deliver it to the Makaytron administration inbox; they are not added to analytics events. The form does not request access keys or passwords, and records are kept only as long as necessary.