Privacy Policy

01Whose data, whose responsibility?

Businesses using WiseCRM enter their own customers' data (appointments, sales, health information, messages and so on) and are the data controllers of that data. WiseCRM processes it only on the business's behalf and to provide the service.

This policy mainly covers data for which WiseCRM itself is the controller: website visitors, people who fill in the contact form and business users who open an account.

02Information we collect

• Contact form: full name, phone, email (optional), your message, the page you sent it from and ad campaign information.
• Sign-up and account: email, full name, phone, password, business name, address and industry.
• Sign in with Google or Apple: the email and name these services share.
• Session and security: IP address and browser information used to sign in, activity logs.
• Preferences: your language choice and your consent to receive emails.

03How we use information

• To open your account, verify your identity and provide the service.
• To respond to your request and provide support.
• To keep the service secure and prevent misuse and unauthorised access.
• If you consented, to send product updates, tips and offers.
• To measure which ads and pages bring in enquiries.
• To meet our legal obligations.

04Who we share it with

We do not sell your personal data. It may be shared only as needed to provide the service with:

• Infrastructure providers for hosting, backups and email delivery.
• Integrations a business connects with its own account (e.g. WhatsApp, payments, SMS, cloud storage, e-signature), at the business's instruction.
• Legally authorised authorities, when requested.

Database backups are stored on the backup provider's servers in the Netherlands (Amsterdam). Details on cross-border transfer are in the KVKK Notice.

05How long we keep it

We keep data for as long as needed for the purpose it was processed for and for the periods required by law. After that it is deleted, destroyed or anonymised. Database backups are deleted automatically after 10 days.

06How we protect it

• All connections to the site and app are encrypted (HTTPS).
• Each business's data is kept separate; each branch accesses only its own data.
• Staff access is limited by role-based permissions; sensitive records such as health information require a separate permission.
• The database is backed up every night.

07Cookies

Our website uses only cookies needed for the site to work. Details are in the Cookie Policy.

08Your rights

Your rights under Turkish Personal Data Protection Law No. 6698 and how to exercise them are in the KVKK Notice. If you are a customer of a business using WiseCRM, send requests about your data directly to that business.

09Changes

We may update this policy; the current version is always on this page and the date at the top changes.