Privacy Policy

This Privacy Policy explains how personal data processed through the browser-based employee support service provided by Badi ("Badi", "we") is collected, used and protected. By using the service you accept the practices described in this policy.

1. Data Controller and Data Processor

Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller is your employer (your company), from whom you receive the service. Badi acts as a data processor, processing your personal data only on your employer's instructions and on its behalf. Contact: kerem@getbadi.com

2. Data We Collect

• Your contact details: your optional phone number and identifiers associated with your browser session.
• Messages you send: the content you share with us, including text, voice messages and images.
• Your company affiliation: which employer you work for and the company record you are matched to.
• Technical records: message timestamps, response times and metadata about service quality.

3. Purposes of Processing

• Answering your questions about procedures, products, equipment and workplace safety.
• Answering your questions accurately based on your company's documents and relevant legislation.
• Measuring and improving service quality.

4. Data Sharing and Third-Party Processors

To deliver the service, your data may be shared with the following providers:

• Google (Gemini API): to understand your messages with AI and generate answers.
• Supabase: to host data securely.
• PostHog and Google Analytics: to measure how the website, the panel and the chat app are used; only with your consent; details and the preference control are in the Cookie Policy.
• Your employer (your company): your questions and summary analytics may be shared with your company's authorized team.

Your data is never sold or rented to third parties for marketing purposes.

5. Retention Period

Your messaging data (conversation records and message contents) is retained for at most 12 months from the date of the last message and is deleted automatically at the end of that period. When your worker record or your company's record is deleted, the related worker records, documents, conversations and messages are fully removed from the system. Data subject to statutory retention obligations may be kept for the period required by law.

6. Your Rights (KVKK Article 11)

Regarding your personal data, you have the right to:

• Learn whether it is being processed and request information,
• Learn the purpose of processing and whether it is used in line with that purpose,
• Request correction if it is incomplete or inaccurate,
• Request its deletion or destruction,
• Object to processing.

To exercise these rights, contact kerem@getbadi.com.

7. Data Security

Your data is transmitted over encrypted connections, and access is limited to authorized personnel. Each company's data is isolated from every other company's.

8. Changes

We may update this policy from time to time. Material changes are published on this page and the "Last updated" date is refreshed.

9. Contact

For questions: kerem@getbadi.com