Yasal

Privacy Policy

Son güncelleme: 8 Eki 2026

Effective date: October 8, 2026

This Privacy Policy explains how Yeksa collects, uses and protects personal data when you visit our website, contact us, or use the Yeksa platform (the inbox, AI agent and CRM available at app.yeksa.ai). It is written to meet the EU General Data Protection Regulation (GDPR) and similar laws.

1. Who we are

Yeksa is operated by SEO Market, Poelweg 40 E, 1424 PB De Kwakel, the Netherlands ("Yeksa", "we", "us"). You can reach us about anything in this policy at info@yeksa.ai.

2. Our two roles

Controller. We decide how and why we process data about website visitors, people who contact us, and the people who hold a Yeksa account. This policy describes that processing.
Processor. When a business uses Yeksa to talk to its own customers, the messages, contacts and files it handles in Yeksa belong to that business. The business is the controller of that data and we process it only on its instructions. If you are one of that business's customers, please contact the business directly; we will help it answer your request. Customers can ask us for a data processing agreement at info@yeksa.ai.

3. What we collect

When you visit our website or contact us

Details you give us in a form or email, such as your name, phone or WhatsApp number, email address, company and message.
Where you came from, such as the referring page and campaign (UTM) tags. We remove query strings from referrers.
Technical data your browser sends, such as IP address, browser type and the pages you request. Our servers keep this in short-lived logs for security. Where we keep an IP address to stop abuse of our forms, we store a one-way hash of it, not the address itself.

When you create and use an account

Account data: name, email address, a hashed password (or your Google account identifier if you sign in with Google), your business name, industry and settings.
Security data: sign-in history, multi-factor authentication settings and session information.
Billing data: your plan, invoices and subscription status. Payments are handled by our merchant of record, Polar, so we never receive your full card number.
Usage data: which features you use and how much, so we can apply plan limits and improve the product.

Content you and your customers create in Yeksa

Messages, attachments and voice notes exchanged through the channels you connect (for example WhatsApp, Instagram, Messenger, Telegram, SMS, email and web chat), and the contact details of the people you talk to.
CRM records such as contacts, companies, deals, tasks and notes.
Knowledge you give your AI agent: website pages you ask us to read, files you upload and answers you give the AI.

4. Why we use it, and our legal basis

To provide the service you signed up for, including running your inbox, AI agent and CRM (performance of a contract).
To answer your enquiries and follow up on a request you made through our website, for example a request to be contacted on WhatsApp (steps you asked for before a contract, or our legitimate interest in responding).
To keep Yeksa secure, prevent fraud and abuse, and fix errors (legitimate interests).
To bill you and keep financial records (contract and legal obligation).
To send service messages, such as security alerts, billing notices and important changes (contract and legitimate interests).
To improve Yeksa using aggregated usage statistics (legitimate interests). We do not use your customers' conversations to train AI models.

We do not sell personal data, and we do not use it for advertising profiles.

5. How the AI features use data

When the AI agent or assistant drafts a reply, translates a message, transcribes a voice note or searches your knowledge, the relevant text is sent to an AI model provider to produce the result. We send only what the task needs, and these providers process it on our behalf. Their terms for business customers do not allow them to use this data to train their models. Every workspace's data is kept separate, and the AI only searches the knowledge of the workspace it is working for.

We use the following service providers (sub-processors). Each one may only use the data to provide its service to us.

Hosting: virtual servers located in the United States, where the Yeksa platform and our databases run.
File storage: Backblaze (B2), in the EU (Amsterdam region), for files and attachments.
AI model providers: Anthropic, OpenAI, Groq and DeepInfra, for AI replies, translation, transcription and knowledge search.
Email delivery: Resend, for sign-in, security and notification emails.
Payments: Polar, our merchant of record, which processes payments, issues invoices and handles sales tax and VAT.
Error monitoring: Sentry, to detect and fix errors.
DNS and email forwarding: Cloudflare.
Sign-in with Google: Google, only if you choose that option.

When you connect a messaging channel, messages travel through that channel's provider (for example Meta for WhatsApp, Instagram and Messenger, or Telegram) under that provider's own terms and privacy policy. We may also disclose data when the law requires it, or to protect the rights and safety of our users and the public.

7. International transfers

Some of our providers, including our hosting, are located in the United States. When personal data from the European Economic Area, the United Kingdom or Switzerland is transferred there, we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism, together with the security measures described below.

8. How long we keep data

Account data and the content in your workspaces: for as long as your account is active. When an account is closed, we delete its content, except where the law requires us to keep something.
Website enquiries and leads: as long as needed to follow up, and no longer than 24 months unless you become a customer.
Billing records: as long as tax and accounting law requires.
Security logs: for a short period, unless we need them to investigate an incident.

9. How we protect data

We use encrypted connections (TLS), keep each customer's data isolated in our database, encrypt sensitive credentials such as channel access tokens and multi-factor secrets, restrict staff access, and offer multi-factor authentication for every account. No system is perfectly secure, so if you believe your account has been compromised, please contact us right away.

10. Your rights

Depending on where you live, you can ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we use it, or send it to another service. Where we rely on your consent, you can withdraw it at any time. To make a request, email info@yeksa.ai. We will reply within one month. You also have the right to complain to a data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

11. Cookies and similar technologies

Our website does not use advertising cookies. The Yeksa app uses strictly necessary cookies to keep you signed in securely. Your browser may also store small preferences, such as your theme. If we add analytics that require consent, we will ask for it first.

12. Our web crawler

YeksaBot reads public web pages only when a Yeksa customer asks it to add their website to their AI agent's knowledge. It follows robots.txt. See About YeksaBot for details.

13. Children

Yeksa is a business service and is not meant for anyone under 18. We do not knowingly collect data from children.

14. Changes to this policy

We may update this policy as Yeksa changes. If the changes are significant, we will tell account holders by email or in the app before they take effect. The date at the top shows when it last changed.

15. Contact

SEO Market (Yeksa), Poelweg 40 E, 1424 PB De Kwakel, the Netherlands. Email: info@yeksa.ai.