Privacy Policy

1What Data Do We Collect?

As Piyax Finance, we collect the following categories of personal and technical data to provide our services:

Account Information:

• First name, last name, and email address (upon registration)
• Password (stored encrypted and hashed; plain text is never stored)
• Subscription plan and payment history

Usage Data:

• Anonymous statistics on how you use the site (page visits, clicks)
• IP address and browser information (for security and analytics)
• Your watchlist and price alerts
• API key usage logs

Payment Information: Payments are processed through Iyzico. Sensitive payment data such as card numbers and CVV codes are never stored on Piyax servers.

2How Do We Use Your Data?

We use collected data only for the following legitimate purposes:

• Service delivery: Subscription management, dashboard access, price alerts, and API key services.
• Security: Protecting your account against unauthorized access, detecting suspicious activity.
• Communication: Sending password resets, subscription confirmations, and important service notices.
• Improvement: Analyzing anonymous usage statistics to improve the platform.
• Legal obligations: Fulfilling tax, accounting, and regulatory requirements.

3Cookies

Piyax Finance uses the following cookie categories:

• Essential Cookies: Session management and security. The site cannot function properly without these.
• Preference Cookies: Your language choice (TR/EN) and theme preference (light/dark mode). Stored in your browser.
• Analytics Cookies: Anonymous visitor statistics (e.g. Google Analytics — with anonymized IP).

You can manage cookies through your browser settings. Disabling essential cookies may affect site functionality.

4Data Sharing with Third Parties

Your data is shared with third parties only in the following limited circumstances:

• Iyzico (Payment Infrastructure): Required data is transmitted to process payments. Iyzico is PCI-DSS certified.
• Hosting Provider: The company operating site infrastructure; accesses data only for technical maintenance.
• Email Service: Used for transactional emails (password resets, subscription notifications).
• Legal Requirements: Information may be disclosed to competent authorities upon court order or legal obligation.

5Data Security

We implement industry-standard measures to protect your data:

• All connections are protected with SSL/TLS encryption.
• Passwords are stored hashed using the bcrypt algorithm.
• API keys are generated cryptographically at random.
• Regular security scans and updates are applied.
• Payment data is never stored on Piyax servers.

That said, no data transmission over the internet is 100% secure. If you suspect any security breach, please immediately report it to info@piyax.com.

6Data Retention

We retain your data only for as long as necessary:

• Account data: While your account is active and 30 days following a deletion request.
• Payment records: 10 years as required by tax law (Turkish Commercial Code).
• Contact forms: 1 year.
• Analytics data: Anonymously for a maximum of 26 months.
• API access logs: 90 days.

To delete your account, email info@piyax.com. All your data (except legally required records) will be deleted within 30 days.

7Your Rights (KVKK / GDPR)

Under Law No. 6698 on Protection of Personal Data (KVKK) and applicable EU regulations, you have the following rights:

• ✅ Right to be Informed: The right to know what data we process about you.
• ✅ Right of Access: The right to request a copy of your personal data.
• ✅ Right to Rectification: The right to have incorrect or incomplete data corrected.
• ✅ Right to Erasure: The right to request deletion of your data.
• ✅ Right to Restriction: The right to restrict data processing.
• ✅ Right to Data Portability: The right to receive your data in machine-readable format.
• ✅ Right to Object: The right to object to processing of your data for specific purposes.

To exercise these rights, write to info@piyax.com. Requests are answered within 30 days.

8Children's Privacy

Piyax Finance services are designed for individuals over 18 years of age. We do not knowingly collect personal data from persons under 18.

If you become aware that a child under 18 has provided us with data, please notify us at info@piyax.com and we will promptly delete such data.

9Policy Changes

We may update this privacy policy from time to time. When significant changes occur:

• The "Last updated" date at the top of the page will change.
• Registered members may receive an email notification.
• A notification message may appear upon logging in.

We recommend reviewing this policy regularly. Continuing to use the site after changes means you accept the updated policy.

10Contact