Privacy Policy

1. Overview

At Takasla ("we", "Platform"), we value your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Platform.

This policy is prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and applicable regulations.

2. Information We Collect

2.1 Information You Provide

• During registration: email address, password, display name
• Profile information: bio, location, profile photos
• Listing information: product title, description, photos, price, category
• Address information: name, address, phone number for shipping
• Messages: conversations with other users
• Dispute evidence: photos, videos, documents, text descriptions

2.2 Automatically Collected Information

• IP address and browser information
• Access logs and usage statistics
• EXIF metadata from images (stripped after processing)

3. Cookies and Local Storage

Our Platform does not use cookies. Authentication tokens are stored in your browser's local storage (localStorage). This data is kept only on your device and is not automatically sent to servers.

• accessToken: Session authentication (JWT)
• refreshToken: Session renewal
• userId: User identifier
• locale: Your language preference (TR/EN)

4. How We Use Your Information

• Create and manage your account
• Facilitate trade transactions
• Provide shipping services
• Process payments
• Ensure platform security and detect fraud
• Resolve disputes
• Calculate trust scores
• Generate blockchain certificates
• Send you notifications and updates

5. Information Sharing

We do not share your personal data with third parties except in the following cases:

• Service providers: Email delivery (Brevo), file storage (Cloudflare R2), payment processing (Stripe), content moderation (SightEngine), shipping (Geliver, EasyPost)
• Other users: Shipping addresses are shared with the counterparty during trade transactions
• Legal requirements: When required by court order or legal regulation

We never sell your personal data to third parties for advertising or marketing purposes.

6. Data Security

• Passwords are stored hashed with bcrypt
• All data transfers are encrypted with SSL/TLS
• GPS coordinates and camera information are automatically stripped from uploaded images
• Each service is isolated in its own database
• JWT-based access control and role-based authorization

7. Your Rights

• Right to access: Download all your data from the profile page using "Download My Data"
• Right to correction: Update your information from your profile page
• Right to deletion: Permanently delete your account and all data from your profile page
• Right to objection: Object to results of automated processing

8. Changes

We may update this Privacy Policy from time to time. You will be notified of significant changes via your registered email address. Continued use of the Platform constitutes acceptance of the updated policy.