Last Updated: 27 September 2026
This Privacy & Personal Data Protection Policy explains the general principles governing the processing of personal data in connection with the website, financial technology platform and related services provided by Aslan Finansal Teknolojiler ve Danışmanlık (“Aslan”, “Company”, “we”, “us”).
Data Controller: Aslan Finansal Teknolojiler ve Danışmanlık
Registered Address: Kalabak Mah. 3020 Sok. No:10/5 Urla/İzmir, Türkiye
Privacy Contact: mustafagokhandalgic@gmail.com
Aslan acts as a data controller under Turkish Personal Data Protection Law No. 6698 (“KVKK”) with respect to personal data processed for Aslan's own purposes.
For customer data uploaded, transferred or otherwise processed through the SaaS platform, Aslan may, depending on the nature of the processing, act as a data processor on behalf of the relevant customer. Such roles may additionally be governed by the applicable service agreement and/or Data Processing Agreement.
This Policy may apply to website visitors, free-trial users, registered platform users, individual and corporate customers and their personnel, persons submitting Contact Us forms, prospective customers, marketing subscribers, and persons submitting support requests.
Depending on your use of our services, we may process:
Identity and account information: username and other account information provided by the user.
Contact information: email address and information submitted through contact forms.
Customer and company information: company name, organisation information associated with an account and customer-relationship information.
Transaction and usage information: account creation dates, session and transaction logs, platform usage information, feature usage and user preferences.
Technical and security information: IP address, device and browser information, session records, error logs, security events, authentication information and similar technical records.
Communications and support information: messages, requests and correspondence submitted through Contact Us or support channels.
Marketing information: commercial communication preferences, consent and opt-out records and, where appropriate, marketing interaction information.
Customer-uploaded data: financial statements, financial records, working files, reports, account data and other content uploaded by users.
Customer-uploaded content may contain personal data. Where users upload personal data relating to third parties, responsibility for ensuring that such data has been lawfully obtained and may lawfully be processed through the platform may rest with the customer.
Users should not upload sensitive/special-category personal data unless necessary for their use of the service and they have an appropriate legal basis to do so.
Depending on the relevant processing activity, personal data may be processed to create and administer user accounts; provide free trials; provide financial-analysis and related platform functionality; provide AI-enabled features requested by users; authenticate users and manage access; manage customer and support requests; respond to enquiries; maintain platform security and prevent abuse; detect technical problems and software errors; monitor service performance and reliability; improve our services; comply with contractual and legal obligations; establish, exercise or defend legal claims; and, where permitted by the user or otherwise permitted by law, provide product announcements, offers and similar commercial communications.
Depending on the relevant activity, personal data is processed pursuant to the legal bases provided under Articles 5 and, where applicable, 6 of KVKK.
These may include processing that is directly necessary for the establishment or performance of a contract; necessary for compliance with a legal obligation; necessary for the establishment, exercise or protection of a right; necessary for Aslan's legitimate interests, provided that the fundamental rights and freedoms of the data subject are not harmed; expressly provided for by law; or based on explicit consent where applicable.
Where explicit consent is required, it will be requested separately from the privacy notice.
The platform may permit users to upload real company and financial data.
Depending on its content, such information may contain personal data relating to employees, customers, suppliers, shareholders, managers or other natural persons.
Where a corporate customer determines the purposes and means of processing such information, the customer may act as data controller and Aslan may act as data processor providing the service according to the customer's instructions.
Aslan processes such data as necessary to provide and secure the service, perform analyses requested by the user and fulfil its contractual services.
Any use of customer data by Aslan for independent purposes will be separately assessed under applicable law and contractual arrangements.
Certain analysis, reporting, interpretation or similar platform functions may use artificial-intelligence services.
When a user invokes a relevant AI feature, portions of the content necessary to fulfil the user's request may be transmitted to the relevant service infrastructure.
Aslan seeks to apply data-minimisation principles and, where reasonably possible, restrict transmission of personal data that is unnecessary for the relevant AI functionality.
Users should avoid submitting sensitive/special-category personal data to AI features unless such processing is necessary and lawful.
Aslan may engage service providers for cloud infrastructure, databases, authentication, artificial intelligence, application hosting, error monitoring, security, communications and related functions.
Depending on the services used, our current technology infrastructure may include:
Where these providers or their subprocessors are located outside Türkiye or process information outside Türkiye, personal data may be transferred internationally.
International transfers will be conducted in accordance with Article 9 of KVKK and the applicable requirements and safeguards governing international transfers.
Aslan seeks to implement technical and organisational measures appropriate to the relevant risks to prevent unlawful processing or access and to safeguard personal data.
These may include, where appropriate, access controls; role-based authorisation; strong authentication; password security; encryption in transit; encryption at rest where appropriate; logging and security monitoring; backups; vulnerability and error management; vendor security assessment; data minimisation; and restrictions on unauthorised access.
User passwords should not be stored in readable form or transmitted to analytics, error-monitoring or AI systems.
Personal data is retained for the period necessary for the relevant processing purpose, taking into account applicable statutory retention requirements and limitation periods.
The retention periods currently applied on the platform are:
| Data | Retention period |
|---|---|
| Subscriber account data (username, email address, company names) and the financial data uploaded to the account | For the duration of the subscription; deleted within 30 days after the subscription ends. |
| Financial and company data uploaded during a free trial | Deleted 30 days after the trial ends if the trial is not continued with a subscription. We notify the registered email address at least 7 days before deletion. |
| Free-trial account data (username, email address, password data) | Deleted 90 days after the trial ends if the trial is not continued with a subscription. |
| Contact form messages (name, email address, message) | 12 months from receipt, including notification copies in our business mailbox. |
| Login records (username and time of login) | 12 months. |
| Deletion records (date, reason and a one-way keyed hash of the username and email address; no readable personal data) | 3 years, as evidence that a deletion was carried out. |
All users, including free-trial users, may delete their entire account and all of its data at any time using "Delete My Account" in the user menu. Subscribers may also delete an individual company and all of its data from the Data Management pages. Such deletions take effect immediately.
Deleted data may remain in encrypted daily database backups for up to 7 days and in server logs for up to 30 days, after which it is removed automatically.
When the applicable retention period expires and no further legal basis for processing exists, personal data will be deleted, destroyed or anonymised in accordance with applicable law.
Our website and platform may use Necessary, Functional, Analytics and Marketing cookies and similar technologies.
Non-essential technologies will not be activated before obtaining user preferences where required under applicable law.
Further information is provided in our Cookie Policy.
Product announcements, newsletters, offers and similar marketing communications will be sent in accordance with applicable law and, where required, the recipient's prior permission.
Recipients may change or withdraw their commercial-communication preferences in accordance with applicable law. The applicable Turkish commercial electronic communications and IYS requirements should also be followed.
Data subjects may exercise their rights concerning their personal data under Article 11 of KVKK.
Applications may be submitted in writing to:
Aslan Finansal Teknolojiler ve Danışmanlık
Kalabak Mah. 3020 Sok. No:10/5 Urla/İzmir, Türkiye
or through other methods permitted under applicable legislation.
Where the applicant uses an email address previously registered in Aslan's systems, applications may also be submitted to:
Additional information may be requested where reasonably necessary to verify the applicant's identity. Applications should be concluded as soon as possible and, as a general rule under the applicable procedure, no later than 30 days.
We may update this Policy in response to changes in applicable law, our services or our data-processing activities.
The current version will be published on our website.