Privacy Policy

1. Data controller

The data controller for your personal data is Kodfu Bilişim A.Ş. ("Superpare", "we"), located at Gazi University Teknokent Building, Bahçelievler Mah. 323/1 Cad. A-Blok No:10/A, Gölbaşı / Ankara, Türkiye. You can reach us at info@superpare.com.

2. Scope

This policy covers the superpare.com website, the local directory portals served on Superpare infrastructure, the business management panel (web), and the Superpare Business Panel mobile app published on Google Play (package name: com.superpare.mobile). Content shown on the storefront pages of businesses that publish their own site through the platform is provided by the respective business.

3. Personal data we process

• Identity and contact data: full name (optional), phone number (required for account creation and SMS sign-in), email address (optional).
• Transaction security data: SMS verification (OTP) records, session records, IP address, device and browser information, application/server logs.
• Business data: business name, address, phone number, opening hours, map coordinates, service/product details and the images you upload. This information is published publicly in the directory and on your storefront page.
• Location data: processed only to pinpoint your business on the map, and only when you grant permission (see section 4).
• Photos and media: business, product and campaign images you upload from the camera or gallery (see section 4).
• Notification data: a device notification token so we can send push notifications.
• Payments: payments are handled by the licensed payment institution PayTR; your card details are never stored on Superpare systems — only records such as transaction amount and date are kept.
• Demo/contact form data: organization name, contact person, phone, email and your message.
• Usage data: aggregate statistics not linked to your identity, such as profile view counts.

4. Mobile app permissions (com.superpare.mobile)

The Superpare Business Panel app requests the following device permissions only when you use the related feature and strictly for that purpose; if you decline a permission you can keep using the rest of the app:

• Location (optional): your device’s current location is read once to place your business profile accurately on the map. There is no background location tracking and no location history is kept.
• Camera and photos (optional): lets you take or pick images to upload as business, product and campaign visuals. Only the files you select are uploaded to our servers; your gallery is never accessed or scanned in full.
• Phone number: your account is created and verified with your phone number and an SMS code. Your number appears in the directory only if you choose to publish it as your business contact number.
• Notifications (optional): push notifications are sent for customer requests and panel updates; the device notification token is stored for this purpose.

5. Purposes and legal bases

• Creating your account, verifying it by SMS and providing the panel services — establishment and performance of a contract (KVKK art. 5/2-c).
• Publishing your business storefront and directory listing — performance of a contract and data made public by the data subject (KVKK art. 5/2-c, 5/2-d).
• Security records, abuse prevention and service improvement — legitimate interest (KVKK art. 5/2-f).
• Statutory bookkeeping, records and invoicing — compliance with legal obligations (KVKK art. 5/2-ç).
• Location, camera/photo access and push notifications — explicit consent/permission; you can withdraw any permission at any time from your device settings (KVKK art. 5/1).

6. Data sharing

We do not sell or rent your personal data to third parties for advertising. Data is shared only to the extent necessary to operate the service, with: the SMS provider that delivers verification messages; server and hosting providers; Google Firebase Cloud Messaging for push notifications (the notification token may be processed on Google servers); PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. for payments; and public authorities where lawfully required.

7. Retention

Account data is kept for the duration of your membership; transaction security and log records for the periods required by law (at least 1 year under Law No. 5651); invoices and financial records for up to 10 years under tax legislation. Data whose retention period or purpose has lapsed is deleted, destroyed or anonymized.

8. Cookies

superpare.com uses strictly necessary cookies only: an authentication cookie that keeps your session alive and a cookie that remembers your language preference. No advertising or third-party tracking cookies are used.

9. Data security

Your data is transmitted over encrypted connections (HTTPS/TLS), and the administrative and technical measures required by Article 12 of the KVKK — such as access authorization, network restriction and logging — are applied.

10. Your rights under the KVKK

Under Article 11 of the KVKK you have the right to: learn whether your personal data is processed; request information if it is; learn the purpose of processing and whether the data is used accordingly; know the third parties to whom it is transferred; request correction of incomplete or inaccurate data; request erasure or destruction; request that these operations be notified to third-party recipients; object to a result arising against you from analysis exclusively by automated systems; and claim compensation for damages. You can submit requests to info@superpare.com or the postal address above; requests are answered free of charge within 30 days at the latest.

11. Deleting your account and data

You can permanently delete your account and personal data inside the app via Profile → Delete my account, or without signing in via superpare.com/account-deletion.

12. Changes

Changes to this policy are published on this page and the "Last updated" date is refreshed. Material changes are additionally announced via a panel notification.