Lorki

Turkish Data Protection (KVKK) Notice

Last updated: 15 September 2026

This is an English-language summary of our Turkish Data Protection Law (“KVKK”, Law No. 6698) notice. It applies to personal data of Customers and their representatives processed by Devbase OÜ as data controller when Turkish law applies. For general privacy practices covering all users, see our Privacy Policy.

1. Data Controller

Devbase OÜ
Address: Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia
Email: support@lorki.co

2. Purpose of Processing

We process personal data to create and authenticate your account, provide and perform the Service (AI-powered replies to Instagram DMs, appointment booking), handle billing and accounting, run customer support, improve and secure the Service, and comply with legal obligations.

3. Categories of Data

  • Identity & contact data (name, email, phone, address)
  • Customer transaction data (registration, billing, subscription history)
  • Transaction-security data (IP address, session/access logs, audit log)
  • Marketing/communication preferences (notification settings, language)
  • Third-party (end-user) data flowing indirectly through DMs sent to a Customer’s own Instagram account — for that data the Customer business is the controller and Lorki acts as a processor.

4. Cross-Border Transfers

To provide the Service we may share data with Supabase (hosting/DB), Anthropic (AI reply generation), Meta/Instagram (messaging), Google (if you connect Calendar), Stripe (payments) and Vercel (server hosting). Some of these providers are based outside Türkiye (notably the US); such transfers are carried out under KVKK Article 9 and the Personal Data Protection Board’s cross-border transfer rules (explicit consent or adequate safeguards).

5. Your KVKK Article 11 Rights

Under KVKK Article 11, you have the right to:

  • Learn whether your personal data is processed,
  • Request information if it has been,
  • Learn the purpose of processing and whether it’s used accordingly,
  • Know the third parties it’s transferred to, domestically or abroad,
  • Request correction of incomplete/incorrect data,
  • Request erasure/destruction under the conditions set by KVKK,
  • Request that corrections/erasure be notified to third parties it was transferred to,
  • Object to a result produced solely by automated analysis that is to your detriment,
  • Claim compensation for damage from unlawful processing.

6. How to Apply

Send your request in writing, via registered electronic mail (KEP), secure electronic signature, mobile signature, or the email address you previously registered with us, to support@lorki.co. You can also download your data or delete your account directly from Settings → Account. Requests are resolved free of charge within 30 days.