Privacy Policy

1. Controller and scope

CRESVONA LTD. (Türkiye), the provider of CRESVONA services, is the controller of personal data where it determines the purposes and means of processing for its own activities. Our privacy contact is help@cresvona.com. This policy concerns website visitors, people who contact us, account holders and people who share contact information through our services. Additional notices may apply to a particular feature. This policy is not a request for consent or marketing permission.

2. Information collected by our customers

When you use a form, popup or personal profile page created by a business or individual using CRESVONA, that business or individual generally decides why information is collected and how it is used. CRESVONA acts as a processor on customer instructions for contact lists, form responses and campaign data hosted on their behalf. Please also read the form owner’s privacy notice. Direct requests about your responses to that owner first; if you contact us, we will help direct your request to the appropriate party. Processing for our own account administration, security and legal obligations is separate.

3. Information we collect

We may process the name, email, company and contact details you provide, support messages and attachments, and records relating to your account and the features you use. Paid services may also involve billing details, subscription records and payment results. Information in customer forms depends on the fields chosen by the form owner and may include names, email addresses, telephone numbers, preferences and messages. Website operation and security may involve IP addresses, browser information, request times and error records. Please do not include unnecessary identity documents, payment card information or sensitive information such as health data in your messages.

4. How information is obtained

Information is obtained electronically through website and application forms, account activities, email correspondence, contact lists imported by customers and records created by the features used. Browser preferences and security requests may also be generated automatically. Where a customer provides information about you, that customer must provide the necessary notices and have an appropriate legal basis.

5. Purposes and legal bases

Data necessary to create an account, provide a requested service or support that service is processed where directly related to entering into or performing a contract (Turkish Law No. 6698, Article 5(2)(c)). Billing and lawful authority requests rely on processing expressly provided for by law or necessary to meet a legal obligation (Article 5(2)(a) and (ç)). Dispute records may be retained where necessary to establish, exercise or protect a right (5(2)(e)). Necessary abuse prevention and security processing relies on legitimate interests provided your fundamental rights and freedoms are not harmed (5(2)(f)). Optional personalization and marketing activities requiring consent rely on consent (5(1)). Information collected for one purpose is not used for another without an appropriate legal basis and the required notice.

6. Communications and marketing choices

Answering a support request or sending necessary service information is different from sending promotional messages. Required marketing permissions are obtained separately; reading this policy or sending a support request does not by itself grant marketing permission. You may withdraw permission using the unsubscribe option in a message or by emailing help@cresvona.com. Withdrawal does not affect lawful processing carried out previously. To leave a customer’s campaign, use that message’s unsubscribe link or contact the sender.

7. Website notification form notice

When the website product notification form is used, we collect the email address, language, submission time and communication permission record. Its purpose is to send product notifications and permitted promotional messages, based on consent and the required commercial communication permission. The retention period set for these records is 180 days from initial submission. Records are deleted earlier when the purpose ends or a valid erasure request applies; limited permission or dispute records that must be retained by law are assessed separately. This is not a general retention period for accounts, invoices or customer contact lists.

8. Cookies and welcome preferences

Optional welcome selections on our website personalize suggestions using your industry and goals. If you allow persistent personalization, these selections are remembered in your browser for 30 days. The cookie preference record lasts 180 days. Withdrawing personalization permission in the Cookie Preferences panel in the footer deletes saved welcome selections. These selections do not by themselves create an email subscription. Website preference controls are separate from your application account and preferences on customers’ independent websites.

Google Analytics and Google Tag Manager load only after you allow analytics. We measure public website pages and clicks on registration or login links; these clicks are not completed registrations. Form responses, email addresses, URL query strings and personal profile pages are excluded from this measurement. Google may process technical connection information and browser identifiers. Analytics cookies are configured to last no longer than 180 days. Advertising personalization is disabled. You can withdraw analytics permission in the same panel at any time; subsequent measurement stops and Google Analytics cookies on this site are deleted. For information processed previously, send an erasure request to help@cresvona.com.

9. Security and service providers

Authorized personnel and providers of hosting, security, communications or support services may process information only to the extent necessary to provide the service. Information may be disclosed to competent authorities where legally required, or to legal advisers where necessary to protect a right. Cloudflare Turnstile, when enabled to prevent automated abuse of the notification form, may process IP addresses and browser information during verification; the email entered in the form is not included in the bot verification request. Information shared with providers is limited to what their service requires.

10. International transfers

Using a provider abroad or permitting access from abroad may involve an international transfer of personal data. Such processing requires the transfer conditions in Article 9 of Turkish Law No. 6698 to be met. Applicable adequacy decisions or appropriate safeguards must be assessed; exceptional transfers may be used only where their legal conditions are met. Accepting this policy does not by itself give permission for international transfers. You can request information about recipients and safeguards used for a particular activity at help@cresvona.com.

11. Retention and deletion

Information is retained only for the period required by its purpose and applicable legal retention duties. Account and support retention takes account of the service relationship, the nature of the request, legal periods and potential disputes. Records processed for customers are subject to their instructions and the applicable agreement. Data no longer needed and not subject to another legal retention basis is deleted, destroyed or anonymized. Closing an account may not delete every record immediately; legally required records are retained only for the relevant purpose.

12. Protecting information

Access restrictions, authentication, abuse prevention and technical and organizational measures to protect records are applied according to the data and processing risks. Absolute security of internet transmission and storage cannot be guaranteed. Personal data incidents are assessed and required notifications made under applicable law. Contact help@cresvona.com if you suspect an account security issue.

13. Your rights under Turkish data protection law

You may learn whether your data is processed and obtain related information, learn the purpose and whether data is used accordingly, and learn the third parties receiving it domestically or abroad. You may request correction of incomplete or inaccurate data, deletion or destruction where legal conditions are met, and notification of these actions to recipients. You may object to adverse results arising solely from automated analysis and seek compensation for damage caused by unlawful processing. Rights under other applicable data protection laws, including access, restriction, objection and portability, remain available where their conditions apply.

14. Making a request

Send privacy questions and rights requests to help@cresvona.com. Include your name, contact details, what you are requesting and the relevant service or activity. To protect your information, proportionate identity verification or completion of a legally required request procedure may be needed; do not send unnecessary sensitive information. Requests duly made under Turkish Law No. 6698 are answered as soon as possible and within 30 days. Requests are generally free; where an activity incurs additional costs, only charges permitted by law may apply. Statutory request and complaint procedures and deadlines remain applicable.

15. Children and external links

CRESVONA accounts are intended for adults. Contact us if you believe a child’s information has been shared improperly. Customers creating forms for their audiences must determine and apply necessary age and permission requirements. Third-party websites are responsible for their own privacy practices; read their notices when following an external link.

16. Policy changes

We may update this policy when services, processing activities or laws change. The current text and update date are provided on this page. Important changes will be separately communicated where required, and separate consent will be obtained if a new processing activity requires it.