Privacy Policy

Last updated: July 2026

SellBox processes and protects the personal data of Trendyol and marketplace sellers in accordance with applicable data protection laws, including the GDPR (Regulation (EU) 2016/679) where applicable. This policy also sets out your data subject rights, described in Section 9 below.

1. Data Controller

İNTELLİGENCE YAPAY ZEKA TEKNOLOJİLERİ ANONİM ŞİRKETİ
MERSİS No: 0478119996200001
Medeniyet Teknopark, Tuzla / Istanbul, Türkiye
Tel: +90 (216) 210 00 40 · Email: [email protected]

2. Data We Collect

Email address (demo requests, sign-up)
Trendyol API key and secret key (integration)
Store, product, price, stock, and order data (retrieved via the Trendyol API)
IP address, browser information, access logs (security, analytics)

3. Purposes of Processing

Operating the platform and delivering the service
AI-powered price analysis and recommendations
Account security and technical support
Compliance with legal obligations

4. Legal Basis for Processing

We process your data on the basis of contract performance, legitimate interest, and, where required, your explicit consent — consistent with the lawful bases for processing recognized under Art. 6 GDPR and equivalent applicable data protection laws.

5. Third-Party Services

Trendyol API (store integration)
AI Infrastructure — US-based servers (business data only, no personal identifiers)
Email Service — Resend (notifications)
Google Analytics 4 (anonymized visitor analytics, IP anonymization enabled)
Google Ads (ad measurement, remarketing)

6. Data Retention and Deletion

Your data is retained for as long as your account remains active. When you close your account, your data is deleted or anonymized, except where retention is required by law. Technical logs are retained for a maximum of 90 days.

7. Data Security

API keys and passwords are stored encrypted. The platform is accessed exclusively over HTTPS, and we apply security layers designed to prevent unauthorized access.

8. Cookies

Strictly necessary cookies (session management) are used automatically. Marketing cookies are only activated with your consent. See our Cookie Policy for details.

9. Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights over your personal data, consistent with GDPR Articles 15–22 and comparable data protection frameworks:

Right of access (Art. 15) — obtain confirmation of and a copy of the data we hold about you
Right to rectification (Art. 16) — request correction of inaccurate or incomplete data
Right to erasure (Art. 17) — request deletion of your data, subject to legal exceptions
Right to restriction of processing (Art. 18) — request that we limit processing in certain circumstances
Right to data portability (Art. 20) — receive your data in a structured, commonly used, machine-readable format
Right to object (Art. 21) — object to processing based on legitimate interest or for direct marketing purposes
Rights related to automated decision-making (Art. 22) — request human intervention regarding decisions produced by our AI-powered pricing recommendations
Right to lodge a complaint with your local data protection supervisory authority

To exercise any of these rights, contact us at [email protected], including your name, account email, and the nature of your request. We verify your identity and respond within 30 days.

10. International Data Transfers

Some of your data is processed on servers located outside your country of residence in order to perform our service, including:

AI processing: business data only (product price, category, etc.), no personal identifiers
Email service: your email address and message content

These transfers are based on the necessity of performing our contract with you and, where applicable, appropriate safeguards consistent with GDPR requirements for international transfers.

11. Related Documents

Subscription Terms — Subscription conditions
Refund Policy — Withdrawal and refund procedure
Cookie Policy
Terms of Use