This Privacy Policy explains how Fraktal Denizcilik Yazılım Limited Şirketi ("Fraktal Denizcilik", "we") collects, uses, shares, and protects personal data in connection with the sailtab.com website, Sailtab products, and related services. It is written to be compliant with the Turkish Personal Data Protection Law (KVKK no. 6698) and the EU General Data Protection Regulation (GDPR, EU 2016/679).
1. Data Controller
The data controller is Fraktal Denizcilik Yazılım Limited Şirketi, registered in Türkiye, headquartered in Türkiye.
All KVKK and GDPR requests should be sent to admin@fraktalstudios.com. This is the single point of contact for the data controller representative.
2. Data We Collect
**Form submissions.** Anything you type into a web form — name, email, phone, boat name, boat model, message. Only the fields you fill in are stored.
**Device telemetry.** From your Sailtab device: license_key, device_uuid, last activation timestamp, OTA software version. Usage behaviour, location data, and live sensor readings are NOT part of telemetry.
**Web analytics.** Plausible Analytics — page views, device class (desktop/mobile), country, and referrer. IP address is anonymised before processing. No cookies are used.
3. How We Use the Data
We use this data to: (a) process orders and quotes, (b) manage license and device records, (c) improve the product and fix bugs, (d) provide customer support, (e) comply with legal obligations (tax, warranty, invoice retention).
We do NOT use personal data to build advertising profiles, sell to third-party ad networks, or perform marketing-driven profiling.
4. Data Sharing and Third-Party Services
We share data with the infrastructure providers we operate on:
**Vercel** (hosting). Serves the website. Form submissions transit through Vercel but are not stored there. US-based, GDPR Standard Contractual Clauses in place.
**Supabase** (database, storage). PostgreSQL database holding form submissions and device records. Hosted in the Frankfurt region — inside EU borders.
**Resend** (email delivery). Sends the auto-confirmation email after a form submission and the operator notification email. EU-based.
**Cloudflare Turnstile** (spam protection). Distinguishes bot traffic on form submissions. Does not collect personal data; only the technical signals needed for bot detection.
These providers act as data processors. They process data only on our instructions. We do not sell or share data with advertising networks.
5. Retention Period
Form submissions and device records are retained for five (5) years from the last interaction. This period derives from Turkish Tax Procedure Law (bookkeeping obligation) and our warranty commitments.
After the period expires, personal data is deleted or irreversibly anonymised. Anonymous aggregate data (counts, distribution statistics) may be retained for product improvement.
Web analytics data (Plausible) is anonymous by design and is not subject to a fixed retention limit.
6. Your Rights
Under KVKK Article 11 and GDPR, you have the right to: (a) know whether your data is being processed, (b) request information about processing, (c) learn the purpose of processing, (d) know the third parties to whom data has been transferred, domestically or internationally, (e) request correction of incomplete or incorrect data, (f) request erasure or destruction, (g) request restoration to the pre-processing state, (h) object to outcomes resulting from automated analysis, (i) claim compensation for damages caused by unlawful processing.
To exercise these rights, send a request to admin@fraktalstudios.com. We respond within thirty (30) days. For unusual or repeated requests, the fee permitted by KVKK may apply.
7. Cookies
We do NOT use advertising or tracking cookies on our website.
Only technically necessary cookies are used (session state, language preference, cookie-notice acknowledgement). They live in your browser and exist only to make the site work correctly.
Web analytics is provided by Plausible Analytics. Plausible does not use cookies, does not collect IP addresses, and does not build personal profiles; it counts anonymous page views only.
The cookie notice shown on your first visit is an informational disclosure required by KVKK and GDPR transparency obligations — it is not a consent gate, because no advertising cookies or personally-identifying analytics are used.
8. International Transfers
Our primary database (Supabase) is hosted in Frankfurt — within EU borders. Parts of the hosting and back-up infrastructure (Vercel) are in the United States; those transfers are covered by GDPR Standard Contractual Clauses (SCC) and the EU-US Data Privacy Framework.
No transfer outside the EU and Türkiye occurs beyond that. We do not transfer data to ad networks, data brokers, or analytics resellers.
9. Changes to This Policy
When we make a material change to this policy (a new data category, a new sharing party, or a change affecting user rights), we notify active users by email and through an OTA update notice on the device.
The "Last updated" date at the top is updated with every revision. The previous version is available on request.
10. Data Protection Officer
KVKK data controller representative and GDPR Data Protection Officer — single point of contact:
Fraktal Denizcilik Yazılım Ltd. Email: admin@fraktalstudios.com
You retain the right to lodge a complaint with the Turkish or relevant EU data protection authority.