Last Updated: 24 July 2026 | Version: 1.0
This Privacy Policy explains how personal data collected through the website operated by Bimetrik Teknoloji Yazılım ve Danışmanlık Anonim Şirketi (“Bimetrik”, “Company”, “we”), the SaaS application at https://app.bimetrik.com, the mobile applications (App Store / Google Play) and the browser extension (Chrome Web Store and other extension stores) is processed. By using our services, you accept the practices described in this policy.
1. Data Controller
The data controller in respect of your personal data is the Company whose details are provided below:
- Legal Name: Bimetrik Teknoloji Yazılım ve Danışmanlık Anonim Şirketi
- Address: Yeniköy Merkez Mah. Vatan Cad. Teknopark Sitesi No: 83 İç Kapı No: B35 Başiskele/Kocaeli
- Tax Office / No: Tepecik Vergi Dairesi / 1751033095
- MERSIS No: 0175103309500001
- E-mail: [email protected]
- Registered E-mail (KEP): [email protected]
- Web: https://bimetrik.ai
2. Personal Data We Process
When providing our services, we may process the following categories of data:
- Identity and contact data: first name, last name, e-mail address, phone number, title/company information.
- Account and membership data: username, encrypted password, role and authorization information, subscription/plan information.
- Invoice and payment data: invoice information, tax/identification number, payment transaction records (card details are not stored by the Company; they are processed at the payment institutions).
- E-commerce integration data: order, product, price, stock, campaign, return and store performance data of the marketplace/e-commerce accounts you connect. This data is predominantly commercial data belonging to your business.
- Usage and transaction data: in-platform actions, preferences and settings, request/complaint records, support correspondence.
- Technical data: IP address, device and browser information, log records, data collected through cookies and similar technologies.
3. Purposes of Processing Personal Data
- Membership creation, authentication and account management,
- Providing, operating and improving the SaaS services, the mobile application and the browser extension,
- Analyzing and reporting your e-commerce data and generating decision-support insights,
- Conducting subscription, billing and payment processes,
- Managing support, requests and complaints and communicating with you,
- Ensuring information security, preventing misuse and detecting errors,
- Fulfilling legal obligations and complying with legislation,
- Promotional and marketing activities where your explicit consent exists.
4. Legal Bases for Processing
Your personal data is processed on the legal bases of the establishment and performance of a contract, fulfillment of a legal obligation, legitimate interest and, where necessary, explicit consent; under Articles 5 and 6 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and — for users residing in the European Union — Article 6 of the General Data Protection Regulation (“GDPR”).
5. Sharing with Third Parties
Your personal data may be shared only to the extent required by the service and under a confidentiality obligation with the following parties:
- Hosting and infrastructure providers: server, database, storage and security services,
- Payment institutions and banks: execution of subscription and payment transactions,
- E-commerce platforms and marketplaces: for account connection and data synchronization,
- Cloud-based service providers: technical infrastructure supporting analysis, reporting and insight generation,
- Authorized public institutions and organizations: only within the framework of obligations arising from legislation.
Your data is never sold or rented to third parties for marketing purposes. The categories of service providers used are published in our Sub-processor List for transparency.
6. AI-Powered Features and Data Processing
Bimetrik offers AI-powered features such as the Insight Agent, AI Report, AI Assistant and Review Sentiment Analysis. These features are operated through cloud-based artificial intelligence technologies.
- Principle of not sharing personal data: None of your personal data is shared with AI technologies. Prior to processing, fields that could directly or indirectly identify an individual — such as name-surname, contact information and account identifiers — are separated using anonymization/masking methods.
- Protection of commercial data: Commercial data belonging to your business — such as product, price, stock, campaign, performance and customer review text — is processed only to the extent necessary for the relevant feature to operate. This processing is secured through mutual agreements signed with service providers (Data Processing Agreement/DPA and, where necessary, Standard Contractual Clauses) and “no-training” commitments (data is not used for model training).
- Free-text fields: Against the possibility that personal data may appear in free-text fields such as customer reviews, such content is masked/cleansed prior to processing.
- Explicit consent and withdrawal: AI-powered features are activated only with your explicit consent; without consent, these features do not operate. You may withdraw the consent you have given at any time from within the application. For details, see the Explicit Consent for AI-Powered Features.
- Sub-processors: The categories of service providers used in these features and other services are transparently published in the Sub-processor List.
7. International Transfer
Some of the servers of our hosting, cloud and AI technology providers may be located abroad. In this case, data is transferred in accordance with Article 9 of the KVKK and the relevant provisions of the GDPR, based on contractual commitments ensuring an adequate level of protection (e.g. Standard Contractual Clauses), technical and administrative measures (encryption, anonymization/masking, access control) and, where necessary, your explicit consent. The principle of not sharing personal data with AI technologies also applies to international transfers.
8. Retention Periods
Your personal data is retained for the period required by the processing purpose and the statute-of-limitations/retention periods stipulated in the relevant legislation. At the end of the period, data is deleted, destroyed or anonymized. Data retention and destruction processes are set out in detail in our separately published Data Retention and Destruction Policy.
9. Data Security
To ensure the security of your personal data, we apply appropriate technical and administrative measures such as access control, encryption, network security, log management and regular backups. The security measures applied are explained in our separately published Data Security Policy.
10. Your Rights
Under Article 11 of the KVKK and — to the extent applicable — the GDPR, you have the rights to learn whether your personal data is being processed, to request information, to have it corrected, to request its deletion or destruction, to object to processing and to request the portability of your data. You can initiate the account termination (exit) and data deletion processes from within the application.
To exercise your rights, you may contact [email protected]. Your request is concluded within 30 days at the latest pursuant to Article 13 of the KVKK.
11. Cookies
Our website and applications use cookies and similar technologies for session management, remembering preferences and usage statistics. For detailed information, see our Cookie Policy.
12. Changes
This Privacy Policy may be updated from time to time. The current version is published on this page together with the “Last Updated” date above. For significant changes, notification is provided by appropriate means.
13. Contact
- Legal Name: Bimetrik Teknoloji Yazılım ve Danışmanlık Anonim Şirketi
- Address: Yeniköy Merkez Mah. Vatan Cad. Teknopark Sitesi No: 83 İç Kapı No: B35 Başiskele/Kocaeli
- E-mail: [email protected]
- Registered E-mail (KEP): [email protected]