1. Data controller
The data controller for personal data processed on stokpax.com and in the Stokpax service is Stokpax, Türkiye. For any privacy question or request, email info@stokpax.com. This notice is written to satisfy both Türkiye's Personal Data Protection Law (KVKK, Art. 10) and the GDPR's transparency requirements.
2. What we collect
Account data: name, company name, email, phone, country — provided when you request access or subscribe. Billing data: handled by our merchant of record and payment partners; we never see or store full card numbers. Usage data: a first-party visitor cookie (spx_vid), the page you landed on, referrer and UTM parameters, used to understand where customers find us. Your business records (inventory, invoices, customers) belong to you and are processed only to provide the service.
3. How we use it, and on what legal basis
We process personal data to provide and improve the service, set up your account, respond to support requests, send transactional emails (welcome, trial reminders, billing notices) and — only if you request early access or subscribe — occasional product updates. Data is collected electronically via the website forms and the service itself. The legal bases are the performance of our contract with you, our legitimate interest in operating and securing the service, and compliance with legal obligations (KVKK Art. 5; GDPR Art. 6). We do not sell personal data.
4. Cookies
We use a single first-party cookie for visitor attribution (1-year lifetime) and standard session storage. No third-party advertising trackers run on this site.
5. Where data lives and how it's protected
Customer databases are physically isolated per customer, encrypted in transit (SSL/TLS) and backed up automatically. Access to production systems is limited and logged.
6. Sharing
We share data only with processors necessary to run the service: hosting, email delivery and our payment merchant of record (which processes billing under its own privacy terms). Each processor is bound by contractual confidentiality.
7. Your rights
You may request access to, correction of, export of, or deletion of your personal data at any time by emailing info@stokpax.com. If you are in the EU/EEA, UK or another jurisdiction with data-protection law (GDPR or equivalent), you also have the right to object to processing and to lodge a complaint with your supervisory authority. Turkish residents' rights under KVKK are described in the Turkish version of this notice.
8. Retention
Account and business data are kept while your subscription is active and deleted within 60 days of account closure, except records we must keep for legal or accounting reasons.
9. Changes
Material changes to this policy will be announced by email or in-app before they take effect.