KVKK Clarification Notice
Last updated: July 17, 2026
This notice is provided in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”). It explains how Yerly, as data controller, processes the personal data of data subjects who use the Yerly service. It is written in English for accessibility; the rights and obligations described are those granted under the KVKK.
1. Data controller
The data controller is Yerly. For any request or question regarding your personal data, contact us at support@yerlyai.com.
2. Categories of personal data processed
- Identity: name and surname
- Contact: email address and, where provided, phone number
- Business: business name, address, Google Place ID, and Google Business Profile information
- Transaction security: IP address, session logs, and device information
- Customer transactions: subscription and payment history (payments handled by LemonSqueezy)
3. Purposes of processing
- providing and maintaining the Yerly service;
- generating AI-assisted analytics and content;
- providing customer support;
- billing and accounting;
- ensuring information security;
- fulfilling our legal obligations.
4. Legal grounds for processing
- performance of a contract (KVKK Art. 5/2-c);
- compliance with a legal obligation (Art. 5/2-ç);
- the legitimate interests of the data controller (Art. 5/2-f);
- explicit consent, for marketing communications and optional features (Art. 5/1).
5. Transfers of personal data
To deliver the service, your personal data may be transferred to the following subprocessors, some of which are located abroad (including in the United States and the European Union). Such transfers are carried out under appropriate safeguards in accordance with Article 9 of the KVKK, including Board-approved standard contracts where applicable:
- Clerk — authentication
- Neon (PostgreSQL), Vercel — database and hosting
- Upstash Redis — rate limiting and caching
- Sentry — error monitoring
- OpenAI — AI services
- DataForSEO, Zernio — search and Google Business Profile data
- Google — Google Business Profile data
- LemonSqueezy — payments (merchant of record)
- Resend — transactional email
6. Your rights under Article 11 of the KVKK
As a data subject, you have the right to:
- learn whether your personal data is being processed;
- request information if your personal data has been processed;
- learn the purpose of processing and whether the data is used in line with that purpose;
- know the third parties, in Turkey or abroad, to whom your data has been transferred;
- request correction of incomplete or inaccurate data;
- request deletion or destruction of your data;
- request that corrections, deletions, or destructions be notified to third parties to whom the data was transferred;
- object to any outcome that arises against you due to analysis solely by automated systems;
- claim compensation for damage arising from unlawful processing of your data.
7. How to apply
To exercise these rights, you may submit your request to us at support@yerlyai.com. We will respond within the period required by the KVKK.
8. Retention
Your personal data is retained for the period required by applicable legislation or for as long as the purpose of processing requires. After your account is deleted, your data is permanently deleted within 30 days, except for records (such as invoices) that must be retained for legally mandated periods.