Privacy Policy

ImmanityWeb is a platform that lets businesses run their website, management panel and business apps. This policy explains what information we collect when you use the immanityweb.com website, the management panels and the ImmanityApp and ImmanityDesk apps, how we use it and how we protect it.

The statutory notice under Turkish Law No. 6698 (KVKK), including data categories, legal bases and your rights, is set out in detail in our KVKK Privacy Notice; the two documents should be read together.

Information you give us: name, e-mail address, phone number, business name and address, billing details, content you upload to the panel, and the messages you send through the contact form, live support and e-mail. We do not store your password in plain text.

Information collected automatically: IP address, browser and device information, sign-in times, records of actions taken in the panel, and the cookies required to run the service. Cookie details are in our Cookie Policy.

Payment information: payments are taken by the payment provider (PayTR or Stripe). Card numbers and security codes never reach us; we only keep the amount, status and transaction reference of the payment.

ImmanityApp (phone) and ImmanityDesk (Windows) are apps that a business's staff sign in to with their panel account; accounts cannot be created inside the apps. The apps process the device model, the device name you set, the app version and, if you allow notifications, the push token. Session data is kept in the device's secure storage.

The camera is opened only to scan a QR code when pairing with the business's computer; images are not recorded or sent to our servers. The apps do not access location, contacts, microphone or photo library, do not use the advertising identifier and do not track you across apps and websites owned by other companies.

You can turn off notification and camera permissions at any time in your device settings; uninstalling the app removes its data from the device.

We use information to provide and set up the service, protect your account and our systems, bill you, answer your support requests, send service notices you need, meet our legal obligations and improve the service.

We send campaigns and product news only if you have opted in. We do not sell your data, share it for advertising or build advertising profiles.

Reservation, order, membership and contact details given on websites that businesses build with ImmanityWeb belong to that business; the business is the data controller and we process that data only on its instructions and as far as the service requires. Please send questions about that data to the business concerned.

We share information only with providers that help us run the service, and only as far as needed: Cloudflare (content delivery, security, file storage), Google (account authentication and notifications through Firebase, AI features through Gemini), e-mail delivery providers (Resend, Mailjet, Brevo) and payment providers (PayTR, Stripe). Some of these providers are located outside Türkiye.

We may also share information when required by law or by a lawful request from a competent authority.

Website, panel and app traffic is carried over encrypted connections. Each business's data is kept separate at the database level; secrets such as payment provider keys are stored encrypted and backups are encrypted. Panel accounts can use two-step verification, and our support team accesses a business's panel only with its approval, for a limited time and with an audit record.

We keep information for as long as the service is provided and for the periods our legal retention duties require. When a subscription ends, the business's data is permanently deleted at the end of the announced export window; removal from backups takes up to 12 months. The periods are detailed in our KVKK Privacy Notice.

You can ask for your account and personal data to be deleted by writing to [email protected]. Business owners can remove team members' accounts in the panel and download the business's records from the “Data export” page.

Our service is meant for businesses and is not directed at people under 18. We do not knowingly collect personal data from children.

When we update this policy we publish the new version on this page together with its effective date. We also announce significant changes to businesses in the panel and by e-mail.

For privacy questions and requests write to [email protected]; for anything else write to [email protected].