Last updated: 2026
1. Data Controller
This Notice has been prepared, pursuant to Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), by [Company Name] ("EstheFlow"), acting as data controller, to inform our customers and the business representatives using the platform about the personal data processed within the scope of the services offered via www.estheflow.com.
2. Personal Data Processed
The following categories of personal data may be processed through our platform:
- Identity and contact information (full name, phone, email)
- Business account information (business name, staff information, role/permissions)
- Customer/appointment data (your end customers' bookings, service package, and messaging history)
- Message content processed via the Instagram, WhatsApp, and Facebook Messenger integrations
- Limited invoice/transaction information related to payments (card details are never stored by us)
- Technical data (IP address, cookie data, usage/log records)
3. Purposes of Processing Personal Data
- Providing the service, and creating and managing your account
- Operating the AI-powered messaging and appointment creation functions
- Carrying out payment transactions and billing
- Fulfilling legal obligations
- Improving service quality and providing technical support
4. Transfer of Personal Data
Your personal data may be shared with our infrastructure providers necessary to deliver the service (cloud hosting, database, payment infrastructure, and messaging platform providers — including Meta/WhatsApp), and with legally authorized public institutions and organizations, within the framework set out in Articles 8 and 9 of the KVKK.
5. Rights of the Data Subject
Under Article 11 of the KVKK, every data subject has the right to
- learn whether their personal data is being processed,
- request information about it if it has been processed,
- learn the purpose of processing and whether it is used in accordance with that purpose,
- request correction if it has been processed incompletely or incorrectly,
- request its deletion or destruction within the framework of legal requirements
To exercise these rights, you can contact us at [Contact Email] .