KVKK Privacy Notice

This Privacy Notice has been prepared pursuant to Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform you about the personal data processed in connection with the browser-based frontline support service provided by Badi ("Badi", "we").

1. Data Controller and Data Processor

With respect to your personal data, the data controller is your employer (the factory, store or hospitality business you work for), from whom you receive the service. Badi acts as a data processor, processing this data only on your employer's instructions and on its behalf. For requests, contact your employer's HR team or hello@keremcebi.co.

2. Personal Data Processed

• Identity and contact: your optional phone number and identifiers associated with your browser session.
• Transaction data: the messages you send us (text, voice message, image) and their contents.
• Employment data: which employer you work for and the business record you are matched to.
• Operational security: technical records of message timestamps, response times and service quality.

3. Purposes of Processing

• Answering your procedure, product, equipment and workplace-safety questions from your company's own documents.
• Escalating urgent or sensitive situations to the authorized supervisor or HR team.
• Delivering, maintaining and improving the service by measuring its quality.
• Fulfilling our legal obligations.

4. Legal Grounds for Processing

Your personal data is processed under Article 5 of KVKK on the following legal grounds:

• Being directly related to the conclusion or performance of a contract,
• Fulfilling our legal obligations,
• Being necessary for our legitimate interests, provided this does not harm your fundamental rights and freedoms.

5. Transfer of Personal Data

To deliver the service, your data may be shared with the following parties, only to the extent necessary:

• Google (Gemini API): to understand your messages with AI and generate answers.
• Supabase: to host data securely.
• Your employer: questions, escalations and summary analytics may be shared with your company's authorized team.

Your data is never sold or rented to third parties for marketing purposes.

6. Method of Data Collection

Your personal data is collected electronically, by automatic and partially automatic means, through your communication with us through the browser.

7. Your Rights as a Data Subject (KVKK Article 11)

As a data subject, you have the right to:

• Learn whether your personal data is being processed and request information about it,
• Learn the purpose of processing and whether the data is used in line with that purpose,
• Request correction of incomplete or inaccurate data,
• Request its deletion or destruction,
• Request notification of the third parties to whom it has been transferred,
• Object to processing and claim compensation for damages.

8. Applications

To exercise the rights above, send your requests to hello@keremcebi.co. Applications are resolved within 30 days at the latest, pursuant to Article 13 of KVKK.

9. Changes

This Privacy Notice may be updated from time to time. Material changes are published on this page and the "Last updated" date is refreshed.