Privacy Policy

1. Introduction

At ProxyTurk, we place great importance on your privacy. This policy has been prepared in compliance with the Personal Data Protection Law No. 6698 (KVKK), the European Union General Data Protection Regulation (GDPR), Internet Law No. 5651, Law No. 6563 on the Regulation of Electronic Commerce, and all related legislation.

By visiting our website, registering for our services, or using our services, you acknowledge that you have read, understood, and accepted this privacy policy.

2. Information We Collect

2.1. Information You Provide Directly

• Registration information: Name, surname, email address, phone number, password
• Profile information: Address, city, country, postal code
• KYC verification information: Turkish ID Number, identity document image, facial photo
• Billing information: Company name, tax number, tax office, billing address
• Payment information: Credit card information (PCI-DSS compliant via Stripe), bank transfer information, IBAN
• Support requests: Contact forms, support tickets and correspondence contents

2.2. Automatically Collected Information

• Technical data: IP address, browser type and version, operating system, screen resolution, language preference
• Usage data: Pages visited, click data, session duration, referring URL
• Cookie data: Data collected through cookies as detailed in our cookie policy
• Location data: Approximate location information derived from IP address
• Service data: Proxy connection logs, bandwidth usage, connection durations, request counts

2.3. Information Obtained from Third Parties

• Transaction confirmation information from payment providers
• Verification results from identity verification service providers
• Risk scores from fraud prevention services

3. How We Use Your Information

The information we collect is used for the following purposes:

3.1. Service Delivery

• Creating and managing your user account
• Conducting identity verification (KYC) processes
• Activating and providing proxy services
• Subscription and package management
• Providing technical support

3.2. Payment Transactions

• Processing purchases and payments
• Creating and sending invoices
• Managing refund processes
• Detecting and preventing payment fraud

3.3. Security

• Ensuring account security
• Detecting and preventing unauthorized access
• Preventing abuse, spam, phishing and other malicious activities
• Detecting service agreement violations
• Detecting and preventing DDoS attacks

3.4. Improvement and Analysis

• Improving our service quality and developing new features
• Improving user experience
• Conducting statistical analyses
• Performance monitoring and optimization

3.5. Legal Obligations

• Storing traffic information under Law No. 5651
• Keeping accounting records under tax legislation
• Responding to requests from authorized public institutions and organizations
• Using as evidence in legal disputes

3.6. Communication (With Your Consent)

• Sending service updates and announcements
• Campaign and promotional notifications
• Requesting surveys and feedback

4. Information Sharing

We do not sell your personal data to third parties. Your information may only be shared in the following cases:

4.1. Service Providers

• Payment processors: Stripe (payment processing, fraud detection)
• Infrastructure providers: Server and data center operators
• Security services: Cloudflare (CDN, DDoS protection, WAF)
• Analytics services: Google Analytics (anonymous usage statistics)
• Communication services: Email delivery services, SMS providers
• Live support: Customer support platforms

Data processing agreements have been signed with our service providers, and these parties can only process your data for the specified purposes and within the framework of our instructions.

4.2. Legal Requirements

Your information may be shared with authorized authorities in the following cases:

• Court orders or legal obligations
• Official requests from prosecutors, law enforcement, or regulatory bodies
• When necessary to protect the rights, property, or safety of the company, users, or the public
• Requests from authorized authorities under Law No. 5651
• Requests from the Information and Communication Technologies Authority (BTK)

5. User Responsibility and Recourse

The user accepts and undertakes to use ProxyTurk services in compliance with the laws of the Republic of Turkey and international legal norms. All legal, criminal, administrative and financial responsibility arising from the use of services in an illegal, unlawful manner or in a way that violates the rights of third parties belongs exclusively to the user.

The user accepts and undertakes to cover all direct and indirect material and moral damages (including but not limited to litigation costs, attorney fees, expert fees, administrative fines, compensation amounts) that ProxyTurk, its managers, employees and business partners may suffer due to any third-party claim, complaint, lawsuit, investigation, administrative fine or sanction arising from the use of services, and that ProxyTurk may exercise its right of recourse.

ProxyTurk has the right to report relevant data to the authorized authorities and to suspend or close the user's account without any notice upon detecting any illegal activities by the user.

6. Data Security

We implement comprehensive measures to ensure the security of your personal data:

• 256-bit SSL/TLS encryption for secure data transmission
• AES-256 encryption for storing sensitive data
• Password hashing with bcrypt/argon2 algorithms
• Multi-layered firewall and DDoS protection systems
• Role-based access control (RBAC) and least privilege principle
• Regular security audits and penetration tests
• Real-time monitoring and anomaly detection systems
• Information security management compliant with ISO 27001 standards
• PCI-DSS compliant payment infrastructure (Stripe)
• Automatic backup and disaster recovery plans

Despite these measures, we would like to note that no data transmission or storage method over the internet is 100% secure. In the event of a data breach, the Personal Data Protection Board and relevant individuals will be notified within 72 hours in accordance with Article 12 of the KVKK.

7. Cookies

Cookies are used on our website. For detailed information about the types, purposes, durations and management options of cookies, please visit our Cookie Policy page.

8. Third-Party Links

Our website may contain links to third-party websites. We have no control over the privacy practices of these sites and are not responsible for them. We always recommend that you read the privacy policies of the websites you visit.

9. Children's Privacy

ProxyTurk services are not intended for individuals under the age of 18. We do not knowingly collect personal data from persons under 18. If we learn that a child under 18 has provided us with personal data, we will take the necessary steps to delete this information immediately.

10. International Data Transfer

Within the scope of our service delivery, your personal data may be transferred abroad to countries with adequate protection or subject to adequate measures under Article 9 of the KVKK (Standard Contractual Clauses, Binding Corporate Rules, etc.). For detailed information, please review the Data Protection Notice.

11. Your Rights

Under the KVKK and applicable data protection legislation, you have the following rights:

• Right to access your data
• Right to request correction of your data
• Right to request deletion or destruction of your data
• Right to restrict the processing of your data
• Right to data portability
• Right to object to automated decision-making and profiling
• Right to opt out of marketing communications
• Right to file a complaint with the Personal Data Protection Board

To exercise these rights, you can contact [email protected]. Applications will be responded to within 30 days at the latest.

12. Limitation of Liability

ProxyTurk cannot be held liable for any direct, indirect, incidental, special or punitive damages (including loss of profit, data loss, reputation loss, business interruption) arising from the use or inability to use its services. ProxyTurk's total liability is in any case limited to the service fee paid by the user in the last 3 (three) months.

13. Applicable Law and Jurisdiction

This privacy policy is subject to the laws of the Republic of Turkey. Kocaeli Courts and Enforcement Offices have jurisdiction over disputes arising from or related to this policy.

14. Policy Changes

This privacy policy may be updated from time to time. When significant changes are made, a notification may be sent to your registered email address or an announcement may be made on our website. The updated policy becomes effective from the moment it is published on the website. Your continued use of our services means you accept the updated policy.

15. Contact

For questions about our privacy policy: