Privacy Policy

Overview

This policy explains the data processed when you use the Timyada portal and customer sites. There are two kinds: data belonging to your portal account (registration, subscription, invoicing, support) and the business data you enter into your own site. For business data inside your site you are the controller; we access it on your behalf only to run the service, to fix problems and to provide support at your request.

Data we process

• Account data: name, email address, phone number, password hash and two factor authentication preference.
• Subscription and billing data: chosen plan, number of sites, billing name, tax details and billing address.
• Usage and technical records: IP address, browser information, sign-in attempts, activity and error logs.
• Support correspondence: the tickets you open, the messages and the files you attach to them.
• Site data: the users, forms, processes and documents you create inside your site.

Why we process it

• To provide the service: to set up your site, keep it running and improve it.
• To manage your subscription, issue invoices and follow up on payments.
• To keep the service secure: to detect unauthorised access and prevent abuse.
• To answer your support requests and send you service notifications.
• To meet our obligations under applicable law.

Cookies

We use only the cookies the service needs in order to work: the session cookie, the language preference cookie and the antiforgery cookie. We do not use third party tracking cookies for advertising or profiling. Your light/dark theme preference is kept in your browser's own storage and is never sent to the server.

Sharing

We do not sell your data. We share it only with the suppliers required to deliver the service (hosting infrastructure, email and SMS providers) and only to the extent necessary. Those suppliers may not use the data for their own purposes. We may also have to share data with competent public authorities where a request is made in accordance with the law.

Retention

Your account and site data are kept for as long as your subscription is active. When a subscription ends, your site database is closed to access and deleted at the end of the period stated in the portal. Invoicing and accounting records are kept for the period required by law. Security and access logs are kept for a maximum of twelve months.

Security

Every customer site runs in its own database; no data is shared between sites. Passwords are hashed with PBKDF2, sensitive settings such as connection details are stored encrypted, and all traffic is protected with TLS. Administrative access is role based, two factor authentication is supported and critical operations are logged.

Your rights

You have the right to access your personal data, to have it corrected, to request its deletion and to object to its processing. When you send us a request we answer it free of charge within a reasonable time. If you are located in Türkiye, see our data protection notice for the details of your rights under Law No. 6698.

Personal Data Protection Notice · Terms of Use

Contact

For questions about this document, write to admin@timyabpm.com; if you are signed in to the portal you can also open a support ticket.