KVKK Disclosure Notice
This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform you how your personal data is processed in connection with the Perap Mail service.
1. Data controller
PERAP LLC
1209 Mountain Road Pl NE # 10787
Albuquerque, New Mexico 87110
United States
Email: info@perap.com
Perap Mail is a service provided by PERAP LLC. In this notice, "PERAP LLC", "we" and "Perap Mail" refer to the same data controller.
2. Email content of customer companies
For the emails, attachments, contacts and calendar entries stored in the mailboxes of companies that use Perap Mail, the customer company is the data controller and PERAP LLC acts as a data processor on the customer's instructions. If you are an employee of such a company or someone corresponding with it, please direct requests about this content to that company first.
3. Personal data we process
- Identity and contact: name, email address, phone number, company name.
- Customer transactions and billing: legal entity name, tax office and number, billing address, purchased plans, invoices and payment records. Card details are processed by our payment service provider and are not stored by us.
- Security: IP address, browser and device information, sign-in records, two-step verification records, admin panel activity logs.
- Sending records: for messages sent through webmail, the time of sending, sender and recipient addresses, message ID and the sender's IP address. Subjects and message content are not written to these records.
- Requests and complaints: your support correspondence and requests.
4. Purposes and legal grounds
- Opening your account, providing the email service, billing and support: establishment and performance of a contract (KVKK Art. 5/2-c).
- Obligations under tax, commercial and electronic communications law, requests from competent authorities: compliance with a legal obligation (KVKK Art. 5/2-ç).
- Security of the service and preventing and detecting unauthorized access, spam and abuse: legitimate interest (KVKK Art. 5/2-f).
- Establishing, exercising and defending legal claims (KVKK Art. 5/2-e).
5. Transfers of personal data
Your personal data may be shared, only for the purposes above and to the extent necessary, with:
- service providers we use for hosting, data storage, network security and content delivery,
- our payment service provider, to collect payments,
- when you use the AI assistant, an AI service provider, which receives your request and the related message content in order to generate a response,
- recipients' mail servers, to deliver the emails you send,
- competent public authorities and courts where required by law.
Transfers abroad: The data controller PERAP LLC is established in the United States; service data is hosted in data centers in the European Union and some service providers are located abroad. Your personal data is therefore transferred outside Türkiye. Such transfers are carried out in accordance with the conditions set out in Article 9 of the KVKK.
6. How we collect data
We collect personal data electronically, by automated or partly automated means, through sign-up and order forms, the company panel, webmail and email correspondence.
7. Retention
- Account and contract data: for the term of the contract and afterwards for the limitation periods set by applicable law.
- Invoice records: for the period required by tax law.
- Sending records: 1 year.
- Large files shared by link: at most 30 days, or until the sender removes them.
- Backups: rotated, at most 30 days.
Data whose retention period has expired is deleted, destroyed or anonymized.
8. Your rights under Article 11 of the KVKK
You have the right to learn whether your personal data is processed; to request information about it; to learn the purpose of processing and whether data is used accordingly; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction of incomplete or inaccurate data; to request deletion or destruction under Article 7 of the KVKK; to request that these actions be notified to third parties to whom the data was transferred; to object to a result against you arising solely from automated analysis; and to claim compensation for damages caused by unlawful processing.
9. How to apply
You can send your requests to info@perap.com from your registered email address, together with information sufficient for us to verify your identity. We will respond free of charge within 30 days at the latest, depending on the nature of the request. If your request is rejected, the response is insufficient or no response is given in time, you may file a complaint with the Turkish Personal Data Protection Board.