Privacy policy

• Businesses' records belong to the businesses; we process them only to provide the service.
• We don't sell personal data or use it for ad targeting.
• Card details never reach Efespay; they are entered on the payment service provider's secure page.
• Secret keys for payment connections are stored encrypted and are never shown in plain text on any screen.
• Analytics cookies run only if you consent.

The name, email and phone you give when you open an account; subscription, billing and live application details for your business; login and activity records created while you use the service; and the messages you send us.

If a business takes payments with Efespay, the order and customer details the business sends and the payment results are also kept in Efespay. The owner and data controller of these records is the business concerned. The detailed list is in the KVKK privacy notice.

• To open your account, verify you and keep your session secure.
• To run the dashboard, the API and notifications.
• To manage the subscription, issue receipts and review live applications.
• To answer your support requests.
• To prevent misuse, find bugs and improve the service; aggregate data that doesn't identify individuals is used for these measurements.
• For product news and campaigns, if you consented.

Payments to businesses. Card payments customers make to businesses are taken on the secure payment page of the bank or payment institution the business connects; collection and fund transfers take place on that institution's infrastructure. Efespay doesn't see or store the card number; it passes on the payment instruction and records the result returned by the provider (success or failure, amount, transaction number).

The Efespay subscription. It is paid on the web through iyzico (or Stripe, if the foreign card option is on). Card details stay with these institutions.

To answer your question, the assistant looks only at records you can see with your own permissions. To generate the reply, your question and the necessary records are sent to an AI language model service. The assistant asks for your approval before sending or saving anything, and every approved action is logged.

The assistant's replies may contain errors. Check the source record before making important decisions.

SMS sent on behalf of your business go out from the business's own SMS provider account. You can withdraw the consent you gave for Efespay's commercial messages at any time. Mandatory notifications about payments, security and your account are sent regardless of these preferences.

We use the cookies needed for your session; analytics tools run only if you consent. Details are in the cookie policy.

Connections are encrypted, passwords are stored irreversibly, team members are authorized by role, and important actions are written to the activity history.

You can delete your account in the account settings in the app. When a subscription ends, the business's records aren't deleted; the dashboard becomes read-only. When a business is deleted or the business requests it, the records are deleted or anonymized, subject to statutory retention obligations.

This policy is updated when necessary; we notify you of significant changes at the email address registered to your account. For questions and KVKK requests: info@efespay.com.