Data Protection Notice (KVKK)

Disclosure under Turkey's Personal Data Protection Law (Law No. 6698).

Last updated: September 26, 2026
This text is a template; review with legal counsel before publishing.

1) Data Controller

Data controller is Klyrix Yazılım ("Klyrix"). Contact: kvkk@klyrix.com.

2) Personal Data Processed

When using the Klyrix VDS panel, the following data is processed: • Identity: name, surname, username, email • Contact: email, IP address • Usage: session recordings (RDP DVR), click events, activity/work-hours logs • Device: WireGuard public key, device identifier (single-device policy) • Financial: payment data via Stripe; card details not stored on Klyrix servers

3) Processing Purposes and Legal Basis

Personal data is processed for: • Service provision and subscription management (contractual necessity) • Security and audit (legitimate interest) • Legal obligations (tax, invoicing) • Customer support (contractual necessity)

4) Data Sharing

Data is shared with the following processors for service continuity: • Supabase (database hosting — EU region) • Vercel (application hosting — EU region) • Stripe (payment processing — international, with explicit consent) • Resend / AWS SES (email delivery) • Cloudflare (DNS and security) • Contabo (backup storage — EU, Germany) • Sentry (error monitoring — optional) • Telegram (operator alerts — optional) • ip-api.com (location lookup from the public IP address of a VPN connection; processing location and transfer basis not yet documented — under legal review) Klyrix does not sell or transfer personal data to third parties for marketing.

5) Retention Period

• Account data: 3 years after subscription end • Session DVR: the customer (data controller) sets the period; 7 days by default • Invoices and payments: 5 years (UAE accounting and VAT record-keeping obligation; invoices are issued by the company registered in Dubai Mainland) • System logs: 180 days

6) Your Rights (KVKK Art. 11)

As a data subject you may: • Learn whether your data is processed • Request information about processing • Question purposes and appropriateness • Know which third parties data is transferred to • Request correction of inaccurate/incomplete data • Request deletion • Object to adverse automated profiling • Request compensation Applications: kvkk@klyrix.com

7) Contact

Klyrix Yazılım Email: kvkk@klyrix.com Web: klyrix.com
You acknowledge that you have read and understood this notice.