Privacy Policy

Effective date: 12.05.2026

Last updated: 12.05.2026

This Privacy Policy ("Policy") has been prepared by MES YAZILIM ANONİM ŞİRKETİ ("Mes Yazılım", "we") to explain how personal data is processed within the scope of customer communication and support services ("Service") provided via WhatsApp Business, in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and related legislation.

1. Data Controller

The contact information of Mes Yazılım Anonim Şirketi, acting as the data controller, is as follows:

2. Personal Data Processed

The following personal data is processed within the scope of the Service:

  • Contact data: WhatsApp phone number and visible name (if any).
  • Communication content: Messages sent by the customer and transmitted by us (text and media, if any), sending timestamps, message status.
  • Technical records: Message identifier (WhatsApp ID), transmission error information, log records.

3. Purposes of Data Processing

  • Sending informational and support messages regarding our services to customers
  • Receiving, tracking and responding to customer requests
  • Ensuring service quality and security
  • Fulfilling legal obligations and establishing evidence in legal disputes

Mes Yazılım does not send marketing, advertising, or promotional messages; nor does it use data for ad targeting, profiling, or selling to third parties.

4. Legal Grounds for Processing

Pursuant to KVKK Art. 5/2, your personal data is processed based on the following legal grounds:

  • Being directly related to the conclusion or performance of a contract
  • Being mandatory to fulfill our legal obligation
  • Being mandatory for the establishment, exercise, or protection of a right
  • Being mandatory for our legitimate interests

In cases outside these grounds, processing is carried out with your explicit consent.

5. Third-Party Data Transfer

The messaging infrastructure operates on the WhatsApp Business Cloud API provided by Meta Platforms Ireland Ltd. Within this scope, messages sent and received are by nature transmitted through WhatsApp and Meta infrastructure; messaging content may be processed by Meta in order to provide this service. For Meta's data processing policies: WhatsApp Business Policy and WhatsApp Privacy Policy.

Data is not shared with third parties outside this purpose; however, sharing may occur with authorized public institutions and organizations within the scope of legal obligations.

6. Data Retention Period

Messaging records are retained for the period necessary to provide the service and resolve potential disputes, for a maximum of 2 (two) years. At the end of this period, data is securely deleted or anonymized. Where legislation requires a longer retention period, the applicable period prevails.

7. Data Security

Mes Yazılım takes appropriate technical and administrative measures to prevent unlawful processing of personal data and unauthorized access to data. These measures include access control, password management, transport encryption (HTTPS/TLS), server security, and log auditing.

8. Rights of the Data Subject (KVKK Art. 11)

By applying to the data controller, every user has the right to:

  • Learn whether their personal data is being processed
  • Request information if it has been processed
  • Learn the purpose of processing and whether the data is used in accordance with the purpose
  • Know the third parties to whom data has been transferred domestically or abroad
  • Request correction if the data has been processed incompletely or incorrectly
  • Request deletion or destruction
  • Request notification of correction or deletion operations to third parties to whom the data has been transferred
  • Object to a result against them arising from analysis by automated systems
  • Request compensation in case of damage

To exercise these rights, you may submit a written application to destek@mesyazilim.com.

9. Opting Out (Opt-Out)

If you do not wish to receive messages sent by us via WhatsApp, simply send "STOP" or "DURDUR" in the relevant chat. Once your request is received, your account will be removed from our notification list. You may also send your request to the e-mail address above.

10. Policy Changes

This Policy may be updated when necessary. The current version is always published on this page, and the "Last updated" date is refreshed accordingly.

11. Contact

For any questions or requests regarding the Policy or your personal data: destek@mesyazilim.com