Privacy Policy

1. Scope and roles

KIMLIKNO helps manufacturers and companies assign permanent digital identities to physical products, publish QR-based public product passports and manage product lifecycle records.

A customer company may be the controller of employee, customer, service and product content that it decides to enter, while KIMLIKNO may process that content on its instructions. Tabudata Yazılım Limited Şirketi is the controller for processing it determines directly for accounts, security, billing and support.

2. Information we process

• Account and membership data, including name, work email, password hash, verification, company role and permissions.
• Company and billing details, including contact, invoice address, tax/identity number, selected plan and invoice contact.
• Product identity and passport data, including model, serial number, production facts, permanent QR URL, published descriptions and manufacturer contact.
• Public or private documents, their visibility, storage and integrity metadata; service, maintenance and ownership-lifecycle records.
• Demo, support, contact and bank-transfer requests, including selected plan, message and request status.
• Transaction metadata: plan, term, net amount, VAT, gross amount, currency, payment method, references and timestamps.
• Technical/security data such as IP address, browser/device, session and CSRF information, audit events, errors and abuse signals.

3. Why we use it

• Provide accounts, company membership and role-based access.
• Issue permanent identities, publish passports and resolve QR destinations.
• Provide document, service, maintenance and ownership-lifecycle features.
• Operate subscriptions, capacity, billing, payments, bank-transfer requests and commercial history.
• Respond to enquiries, protect security and continuity, prevent abuse, audit activity and meet legal obligations.

4. Public and private product information

A published Machine Passport can show product/model data, serial number, public documents and manufacturer contact deliberately marked public by the customer company. Internal notes, private files, accounts, memberships, permissions, quotes, prices and invoices are excluded. Customer companies are responsible for accuracy, legality and authority to publish their content.

5. Commercial requests and bank transfer

Standard KIMLIKNO plans are annual and payment is handled outside KIMLIKNO by bank transfer. KIMLIKNO does not collect card or bank-account details or receipt files.

Creating a request does not prove payment or activate access. Authorised TabuData staff manually start the annual commercial term after external commercial verification.

6. Sharing and security

Information may be shared as necessary with hosting/storage, email and security providers, professional advisers and legally authorised authorities. We apply access control, tenant isolation, server-side authorisation, audit logging, secure transport and document visibility controls. Report suspected incidents to [email protected].

7. Retention and permanent identities

We retain records for their purpose, the contract and product lifecycle, statutory periods and dispute limitation periods, then delete, destroy or anonymise them as appropriate.

Subscription cancellation or expiry does not automatically delete existing machine identities, permanent QR URLs, published passports, documents, service history or ownership history. Paid status governs future subscription-dependent capacity and actions; deletion requests are assessed against safety, legal duties, third-party rights and identity integrity.

8. Rights and contact

Send applicable access, correction, deletion or objection requests with sufficient identity verification to [email protected]. Turkish data subjects can read the separate KVKK Notice for rights under Law No. 6698. Material policy changes will be communicated appropriately; the version and update date above identify the current text.