Last updated: July 17, 2026 · Effective date: July 17, 2026
As godsofsale.com ("Data Controller", "Company"), we explain in this text our practices regarding the processing of personal data of natural persons who use our Services, within the scope of Turkish Personal Data Protection Law No. 6698 ("KVKK") and related secondary legislation. Because the Company provides services to e-commerce sellers operating in the Republic of Turkey, our data processing activities are carried out in accordance with the provisions of KVKK.
For the purposes of this Privacy Notice, the data controller is the operator of godsofsale.com, residing at 30 North Gould Street STE 44034, Sheridan, Wyoming 82801, United States. For Users in Turkey, the data controller status within the meaning of Article 3 of Law No. 6698 on the Protection of Personal Data (KVKK) applies in the same way, including with respect to data processing activities concerning the Services offered in Turkey. For contact: [email protected]
2.1. Identity and Contact Data: First and last name, email address, phone number, business/company name.
2.2. Account and Authorization Data: Username, encrypted password, membership date, selected subscription plan, accepted contract versions.
2.3. Transaction Security Data: IP address, session records, device and browser information, login and logout timestamps.
2.4. Financial Data: Invoice information, payment history (sensitive payment data such as card numbers is processed by PCI-DSS compliant third-party payment institutions and is not stored on Company servers).
2.5. Commercial Activity Data: Product, stock, order, price, and sales performance data belonging to the marketplace accounts connected by the User; this data is processed for the purpose of performing the Services (Hermes and other modules).
2.6. Marketing Consent Data: Electronic commercial message consent, newsletter subscription preferences.
Your personal data is processed for the purposes of (a) creating membership and ensuring account management, (b) performing the Services (Hermes, XML Bridge & BulkLoad, RenderKit & Descript Bot, SeoScope & ProfitPulse, and other modules), (c) carrying out invoicing and collection processes, (d) responding to customer support requests, (e) measuring service quality and improving the platform, (f) fulfilling legal obligations (tax legislation, e-invoicing regulations), (g) carrying out information security processes and preventing unauthorized access, and (h) sending commercial electronic messages where your explicit consent exists.
Your personal data is processed on the legal bases listed in Articles 5 and 6 of KVKK: (i) being directly related to the establishment or performance of a contract (performance of the membership agreement and the Services), (ii) fulfilling a legal obligation (tax and accounting legislation), (iii) the Company's legitimate interest (service security, prevention of fraud, analysis of service quality), and (iv) the existence of your explicit consent (marketing messages).
5.1. Your personal data may be shared with payment institutions providing billing and payment infrastructure, cloud server and hosting service providers, email and customer communication platforms, and legally authorized public institutions and organizations (in cases such as court orders or tax audits), in compliance with the conditions set out in Articles 8 and 9 of KVKK.
5.2. Because the Company's cloud infrastructure is located abroad (in United States and European Union data centers), your personal data may be transferred abroad. Such transfers are carried out within the framework of Article 9 of KVKK and the current regulations of the Personal Data Protection Board on cross-border data transfers (adequacy decision, appropriate safeguard mechanisms, or explicit consent).
5.3. Your commercial activity data is processed solely with your authorization and for the purpose of performing the Services, to provide access to the relevant marketplace APIs (Trendyol, Hepsiburada, Amazon TR, etc.); this data is not sold or rented to third parties for marketing purposes.
Your personal data is retained for the period required by the purpose of processing and, in any case, for the statute of limitations periods prescribed in the relevant legislation (10 years for commercial books and documents under Turkish Commercial Code No. 6102, and 5 years for tax documents under Tax Procedure Law No. 213). In account closure requests, data with no legal retention obligation is deleted, destroyed, or anonymized within a reasonable period.
The Site may use mandatory cookies for session management, security, and remembering preferences, and analytics cookies to analyze site usage. Non-mandatory cookies are enabled only with your explicit consent. You may change your cookie preferences at any time through your browser settings.
The Company takes appropriate technical and administrative measures, including encryption (TLS/SSL), access control, logging, and regular security audits, to prevent your personal data from being unlawfully processed or accessed and to ensure its safekeeping. However, we emphasize that no absolute guarantee can be given that data transmission over the internet or data storage in electronic environments is 100% secure.
Under Article 11 of KVKK, by applying to the Company you have the right to: (a) learn whether your personal data is processed, (b) request information if it has been processed, (c) learn the purpose of processing and whether it is used in accordance with that purpose, (d) know the third parties to whom it is transferred domestically or abroad, (e) request correction if it is incomplete or inaccurately processed, (f) request deletion or destruction under the conditions set out in Article 7 of KVKK, (g) request that correction and deletion operations be notified to third parties to whom the data was transferred, (h) object to an outcome against you arising from analysis of data exclusively through automated systems, and (i) claim compensation for damages arising from unlawful processing.
To exercise these rights, you may apply in writing to [email protected] with documents verifying your identity. In accordance with Article 13 of KVKK, applications are concluded free of charge within thirty (30) days at the latest, depending on their nature; if the process requires an additional cost, a fee set by the Personal Data Protection Board tariff may be charged.
In accordance with Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communications and Commercial Electronic Messages, commercial electronic messages (campaigns, newsletters, announcements, etc.) are sent to you only if your explicit consent exists. You can stop these messages at any time through the opt-out mechanism in each message (the UNSUBSCRIBE link or a request via [email protected]).
The Company reserves the right to revise this Privacy Policy in line with changes in legislation or updates to business processes. The current text is always published on the Site and takes effect on the date it is published.
For KVKK applications and your questions: [email protected]