Privacy Policy

Introduction

At Sovex, we care about the privacy and security of your personal data in the services we provide from Türkiye. This policy explains which personal data are collected when you use our services, how they are processed and what your rights are in this regard. Processes relating to your personal data are carried out in accordance with Law No. 6698 on the Protection of Personal Data (KVKK).

What data we collect

To enable you to use our services, we collect basic account information such as your name, e-mail address and contact details when you create an account on the Sovex panel (panel.sovexone.com). To measure how the site is used, we use Cloudflare Web Analytics and Umami, running on Sovex's own server, which do not use cookies; they keep no record that identifies a visitor and only count aggregate information such as page, source, device type and country. When you enter the site, a cookie window opens. If you do not reject within 5 seconds, Google Analytics (`_ga` cookies, up to 2 years) and Microsoft Clarity (`_clck`, `_clsk` cookies, up to 1 year) also run to improve and personalise the service; until then, measurement records wait only in your browser. If you reject, these tools are not loaded at all, no cookie is written and the waiting records are deleted without being sent. Your choice is stored only in your browser; you can change it at any time with the "Cookie settings" link at the bottom of the page.

Cookies

The only functional cookie required for the service to work is the one that remembers the consent you give for the Sovex AI wizard (`sovex_riza`, when you tick the consent box, 180 days). No accounts are opened and no sign-in takes place on this site; the account session is kept on the Sovex panel. We do not use third-party advertising cookies or tracking cookies placed by advertising networks. To measure how the site is used, we use Cloudflare Web Analytics and Umami, running on Sovex's own server, which do not use cookies; they keep no record that identifies a visitor and only count aggregate information such as page, source, device type and country. When you enter the site, a cookie window opens. If you do not reject within 5 seconds, Google Analytics (`_ga` cookies, up to 2 years) and Microsoft Clarity (`_clck`, `_clsk` cookies, up to 1 year) also run to improve and personalise the service; until then, measurement records wait only in your browser. If you reject, these tools are not loaded at all, no cookie is written and the waiting records are deleted without being sent. Your choice is stored only in your browser; you can change it at any time with the "Cookie settings" link at the bottom of the page.

Third-party services

We work with a limited number of trusted infrastructure providers to deliver our services; these include e-mail delivery as well as content delivery and security infrastructure. Data shared with these providers are limited to what is necessary for the relevant service to function, and our contracts with our providers are set up with data security in mind.

Security of your data

We take reasonable technical and administrative measures to protect your personal data against unauthorised access, loss or misuse. Access rights are restricted and our security practices are reviewed regularly, as the nature of the service requires.

Your rights

Detailed information about your rights under KVKK and how to exercise them is available in the KVKK information notice section below.

Contact

For questions about our privacy policy, you can reach us via our contact page.

KVKK information notice (Law No. 6698)

This notice has been prepared to inform you, in our capacity as data controller, about your personal data that we process under Law No. 6698 on the Protection of Personal Data (the Law).

It is not a generic template: it describes the functions that actually run. Contact, WhatsApp and the Sovex AI quote wizard are on this site; account, order and payment are on the Sovex panel (panel.sovexone.com). No advertising cookies or tracking pixels are used on the site. To measure how the site is used, we use Cloudflare Web Analytics and Umami, running on Sovex's own server, which do not use cookies; they keep no record that identifies a visitor and only count aggregate information such as page, source, device type and country. When you enter the site, a cookie window opens. If you do not reject within 5 seconds, Google Analytics (`_ga` cookies, up to 2 years) and Microsoft Clarity (`_clck`, `_clsk` cookies, up to 1 year) also run to improve and personalise the service; until then, measurement records wait only in your browser. If you reject, these tools are not loaded at all, no cookie is written and the waiting records are deleted without being sent. Your choice is stored only in your browser; you can change it at any time with the "Cookie settings" link at the bottom of the page.

Data controller

• Data controller: Ahmet Sait Yuvarlak, operating under the business name Sovex.
• Address: Yenidoğan Mah. Ordu Cad. Erdi Ap. No: 148 İç Kapı No: 3, Gaziosmanpaşa / İstanbul
• Tax office and number: Gaziosmanpaşa · 9870281825
• Applications: the channels on our contact page or the postal address above.

Personal data processed and their source

The following data are obtained electronically, directly from you, while you use this site and the Sovex panel. No data are collected from other sources or purchased.

• Account data: name and e-mail address. Your password is not stored; only an irreversible hash of it is kept.
• Session data: session cookie and session record. The cookie is inaccessible to browser scripts, is sent only over secure connections and expires after thirty days. The database stores a hash of the session token, not the token itself.
• Order data: the package and period you choose, the amount and the status of the order.
• Payment data: records of transaction results returned by the payment institution. Your card number, expiry date and security code never reach us at any stage; this information is collected directly by the payment institution.
• Transaction security data: your IP address, which must be transmitted to the payment institution when a payment is initiated.
• Sovex AI wizard data: the text you write and the choices you make in the quote wizard. Details under the heading below.
• Explicit consent record: the record created when you give consent for the Sovex AI wizard — date and time, the version of the text you approved, your IP address and browser information. It is kept in order to be able to prove that consent was given.
• Contact data: what you write to us of your own accord via WhatsApp or e-mail.

Purposes of processing and legal grounds

• Opening your account and maintaining your session — establishment and performance of a contract (Law art. 5/2-c).
• Carrying out order and payment processes — performance of a contract (art. 5/2-c).
• Invoicing, accounting and statutory record-keeping obligations — compliance with a legal obligation (art. 5/2-ç).
• Providing the service securely and preventing misuse — legitimate interest (art. 5/2-f).
• Responding to support and contact requests — performance of a contract and legitimate interest.
• Running the Sovex AI quote wizard — your explicit consent (art. 5/1). If you do not give consent, the rest of the wizard — steps, choices, cart and quote — continues to work in full.

Sovex AI quote wizard

You can chat with Sovex AI in the wizard on the Minecraft quote page. This function runs only when you tick the consent box; no request is sent until it is ticked.

This is the scope of the consent box. The explicit consent you give by ticking the box *“KVKK aydınlatma metnini okudum, açık rıza veriyorum”* (“I have read the KVKK information notice and give my explicit consent”) in the wizard covers the processing described below: sending the text you write in the wizard and your choices to the artificial intelligence infrastructure provider named below in order to generate a response, and therefore transferring them abroad. Consent is given for this purpose only; it is not used for any other purpose.

• Sent: the message you write at that moment, your previous messages in the same session and the choices you make in the wizard — game type, number of players, selected plugins.
• Not sent: your name, e-mail address, phone number, or the name of your server or brand. The wizard does not ask for these. If you choose to move the conversation to WhatsApp, you send the message yourself from your own device.
• Where: the service runs on artificial intelligence infrastructure operated by Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (DeepSeek). The provider is established in the People's Republic of China and states in its own privacy policy that it processes and stores personal data in the People's Republic of China. The text you write is therefore transferred abroad; the transfer is based on your explicit consent under Article 9 of the Law.
• Retention: your chat is not stored on our servers and is not written to our server logs. The chat is kept only in your browser while that tab remains open; it is deleted when you close the tab. Processing and storage of the text reaching the provider are subject to the provider's own policy; we have no control over that policy.
• Model training: the privacy policy published by the provider states that personal data may be used to train its models and develop its technology. The platform terms published by the provider contain no commitment that texts transmitted through the interface will not be used for training. We therefore recommend that you do not enter personal data or confidential information in the wizard; the wizard does not ask for them anyway.
• Nature of the results: the text produced by Sovex AI is a suggestion; it is not a commitment on price, timeframe or scope. The final scope and price are set out in the written quote provided to you.
• Recording and remembering consent: when you tick the box, a record showing that you gave consent is created — date and time, the version of the information notice you approved, your IP address and browser information. We keep this record in order to be able to prove the existence of consent as required by the Law. A cookie is also placed in your browser (`sovex_riza`, 180 days) so that the consent box does not reappear when you return to the site.
• Withdrawing consent: you can withdraw your consent by deleting your browser's cookies — once the cookie is deleted, consent lapses and the box appears again; no request is sent unless you tick it. You can also write to us at any time using the application method below and request that your consent be withdrawn and the record deleted. The rest of the wizard continues to work in any case.

Transfer of personal data

Your data are shared only to the extent necessary to provide the service and only with the recipient groups below. Otherwise they are not transferred to third parties, sold or used for advertising.

• Hosting and database infrastructure provider — the site, application endpoints and database run on this infrastructure. Its servers are located abroad.
• Artificial intelligence infrastructure provider — Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (People's Republic of China). Only what you write in the Sovex AI wizard is transferred, and only with your explicit consent.
• Payment institution — name, e-mail, order amount and IP address are transmitted to complete the payment. The institution used is shown at the payment step.
• Authorised public institutions and organisations — only in the event of a request or obligation arising from legislation.
• Transfers abroad are based on the conditions in Article 9 of the Law: your explicit consent for the wizard, and necessity for the performance of the contract for hosting and payment.

Retention periods

• Account data: for as long as your account remains open. When you close your account, data not subject to a statutory retention obligation are deleted or anonymised.
• Session record and cookie: thirty days. When you sign out, the session record is invalidated.
• Order, invoice and payment records: for the retention periods required by tax and commercial legislation.
• Sovex AI chat: not stored on the server; deleted when the browser tab is closed.
• Explicit consent record: for as long as consent is valid and, after it is withdrawn, for a further reasonable period for the purpose of proof. The consent cookie expires automatically after 180 days.
• Your quote cart: kept only in your browser, in temporary storage belonging to that tab; it is not sent to us.

Cookies (KVKK notice)

The only functional cookie on this site is created only when you take an action: `sovex_riza` is created when you tick the consent box in the Sovex AI wizard and remembers your consent (180 days); it contains only the number of your consent record. The account session is kept on the Sovex panel, not on this site. No advertising cookies or tracking pixels are used. To measure how the site is used, we use Cloudflare Web Analytics and Umami, running on Sovex's own server, which do not use cookies; they keep no record that identifies a visitor and only count aggregate information such as page, source, device type and country. When you enter the site, a cookie window opens. If you do not reject within 5 seconds, Google Analytics (`_ga` cookies, up to 2 years) and Microsoft Clarity (`_clck`, `_clsk` cookies, up to 1 year) also run to improve and personalise the service; until then, measurement records wait only in your browser. If you reject, these tools are not loaded at all, no cookie is written and the waiting records are deleted without being sent. Your choice is stored only in your browser; you can change it at any time with the "Cookie settings" link at the bottom of the page. For details, see the Privacy Policy.

Data security

• Passwords are stored as irreversible hashes; no plain-text passwords are kept.
• A hash of the session token is stored, not the token itself; the session cookie is inaccessible to browser scripts.
• All traffic is carried over encrypted connections.
• Card details are never received or stored by us at any stage.

Rights of the data subject

Under Article 11 of the Law, anyone whose personal data are processed may apply to the data controller and exercise the following rights:

• to learn whether personal data are being processed,
• if personal data have been processed, to request information about this,
• to learn the purpose of processing personal data and whether they are used in accordance with that purpose,
• to know the third parties in Türkiye or abroad to whom personal data are transferred,
• to request correction of personal data if they are incomplete or inaccurate,
• to request erasure or destruction of personal data under the conditions set out in Article 7 of the Law,
• to request that operations carried out following requests for correction, erasure and destruction be notified to third parties to whom the personal data have been transferred,
• to object to a result arising against the person through the analysis of the processed data exclusively by automated systems,
• to claim compensation for damage suffered due to the unlawful processing of personal data.

Application method

You can submit your requests via the channels on our contact page or in writing to the postal address above. Your application will be concluded within thirty days at the latest, in accordance with the procedure set out in the Law. If your application is rejected, you find the response inadequate or you do not receive a response in time, you retain the right to lodge a complaint with the Personal Data Protection Board.

Changes

This information notice is updated as the data we process or the infrastructure we use change. The current version is always published on this page; the date at the top of the page shows the last update.