Captivo.io

1. Introduction

At Captivo.io we care about your privacy and take great care to protect your personal data. This privacy policy explains what data we collect, how we use it and how we protect it.

This policy is compliant with Turkey's Law No. 6698 on the Protection of Personal Data (KVKK) and the General Data Protection Regulation (GDPR).

2. Data Collected

2.1 Platform Users (Tenant Admin)

First name, last name and email address
Phone number
Company/business information
Payment and billing information
Usage data and logs

2.2 Guest WiFi Users

The following data about guest WiFi users may be processed on behalf of the tenant (business):

Phone number or email address
First and last name (optional)
MAC address and IP address
Connection time and duration
Device information

Note: This data must be retained for at least 2 years under Law No. 5651.

3. Processing of Data

We use the data we collect for the following purposes:

Providing and improving the service
Responding to user support requests
Security and fraud prevention
Fulfilling legal obligations
Statistical analysis (anonymized)

4. Data Security

We take the following measures to protect your data:

All data transfers are encrypted with SSL/TLS
Sensitive data (passwords, API keys) is stored encrypted with AES-256-GCM
Regular security audits and penetration tests are performed
Access controls and authorization mechanisms are applied
Data is stored in secure data centers

5. Data Sharing

We do not sell your personal data to third parties. Data may be shared in the following cases:

Legal obligations (court order, official request)
Service providers (payment, SMS, email — under a data processing agreement)
In the event of a business transfer or merger

6. Cookies

We use the following types of cookies on our website:

Essential cookies: Required for session management and security
Analytics cookies: To understand site usage (Google Analytics)
Preference cookies: To remember your language and theme preferences

You can manage or disable cookies from your browser settings.

7. Your Rights (Under KVKK)

Under KVKK you have the following rights:

To learn whether your personal data is being processed
To request information if it has been processed
To learn the purpose of processing and whether it is used accordingly
To request correction if it is incomplete or inaccurate
To request its deletion or destruction
To request that the processing be notified to third parties
To object to analysis by automated systems
To request compensation if you suffer damages

8. Data Retention Period

User account information: as long as the account is active + 1 year
Guest WiFi records: at least 2 years (under Law No. 5651)
Payment records: 10 years (under tax legislation)
Log records: 1 year

9. International Data Transfer

Your data is stored in data centers in Turkey. If third-party service providers (cloud infrastructure, analytics) are used, adequate protection measures are taken and the necessary agreements are concluded.

10. Children's Privacy

Our service is not directed at individuals under 18. We do not knowingly collect personal data from individuals under 18.

11. Policy Updates

This privacy policy may be updated from time to time. Significant changes are announced on our website and by email. Continuing to use the service after changes means you accept the updated policy.

12. Contact

For privacy questions or to exercise your rights:

Email: privacy@captivo.io
Data Controller: Captivo Yazılım A.Ş.

Privacy Policy