Sub-processors — Teklif Atölyesi

Hetzner Online GmbH

Service: message parsing, assistant and writing suggestions.
Location: United States.
Data: only the text sent for that operation (for example a customer message); a company setting can mask phone numbers and email addresses before sending. Not used for model training.
When: when AI is on for the company and it has not connected its own key.

Service: the same features when the company connects its own API key (for example Google, Mistral AI or a provider the company defines).
Location: depends on the provider.
Data: only the text sent for that operation.
When: when the company connects one; governed by the company's own agreement.

Service: platform emails: password resets, notifications and quote emails (unless the company connects its own email server).
Location: the account's data centre region (EU or US).
Data: the recipient's email address, the email content and attachments.
When: when an email is sent through the platform.

Service: issuing e-invoices and e-archive invoices.
Location: Türkiye.
Data: the invoice recipient's name, tax details, address and invoice lines.
When: when the company connects one of these providers as its e-invoicing integration; Paraşüt may also be used for platform subscription invoices.

Service: card payments: collections from the company's customers and platform subscription payments.
Location: Türkiye.
Data: payment amount, order or invoice details, the payer's name and contact details. Card details are entered only on the payment institution's page and never reach Teklif Atölyesi.
When: when a card payment is taken.

Service: delivering browser and phone notifications.
Location: depends on the provider (mostly US).
Data: the device's push endpoint and end-to-end encrypted notification content (the provider cannot read it).
When: when a user turns on notifications on a device.

Service: SMS notifications and verification codes to customers.
Location: depends on the provider the company chooses (operators in Türkiye).
Data: phone number and message content.
When: when the company connects an SMS provider; governed by the company's own agreement.

Service: authentication with the user's Google account at the user's request.
Location: United States.
Data: the name, email address and account ID sent by Google; Teklif Atölyesi does not send company data to Google.
When: when a user chooses "Continue with Google".

Service: measuring visits to the marketing site (which pages are read, where visitors come from).
Location: United States (Google LLC; EU-US Data Privacy Framework).
Data: the page address visited, referring address, device and browser type, approximate location (derived from the IP address; the IP is not stored); with consent, the random visitor ID in the cookie. No company or customer data from the app is sent.
When: only on visits to the marketing site; cookies only if consent is given in the cookie banner.

Questions about this document? Write to merhaba@teklifatolyesi.com.