1. Controller and scope
Mobicraft Dijital Teknolojiler Limited Şirketi Address: Ziya Gökalp Mah. Muhsin Ertuğrul Cad. No: 3, Başakşehir / İstanbul, Türkiye Contact and privacy requests: [email protected] Platform: influencermarket.tr and the Influencer Market mobile applications. This notice addresses visitors, brand/agency representatives and creators. A collaboration counterparty or payment/store provider may independently control data it processes for its own purposes. Acknowledging this notice is not consent. Document language is separate from legal country. The country selection displays relevant additions; residence, tax residence, the place of service, the advertising audience and mandatory law remain relevant. Selecting a country does not activate a payment, tax or product capability. Consumer, data protection and other local rights that cannot lawfully be waived are preserved.
2. Account, profile and contact data
Email, name, account role, telephone, country, preferred language, time zone, date of birth and profile information you supply are processed to create and verify your account, provide support and deliver the service. Necessary account and contractual processing relies on taking steps to enter into or perform a contract. Access and security records are processed with regard to the legitimate interest in account security and preventing misuse. If you choose social sign-in, identity information supplied through Google/Apple and Firebase is used; social sign-in does not constitute marketing permission.
2a. Country-consistency check
When you register, declare your country of residence, company, billing, tax or bank country, or request a payout, we compare the country you declared with coarse signals: the country your connection comes from (a country code derived from your IP address by our infrastructure provider), your device time zone and language/region settings, in the mobile app the country of your SIM card, of the mobile network you are connected to and of your app store account, the country code of your phone number, the country of your bank account and the countries of your previous sign-ins. For this check we store only two-letter country codes, the time zone name and the result; we do not keep your IP address, city or location in this record. We do this to prevent fraud, to apply tax and invoicing rules correctly (for example the service-export VAT exemption) and to comply with sanctions. The legal bases are legal obligation and our legitimate interest (GDPR Art. 6(1)(c) and (f); KVKK Art. 5/2-ç and 5/2-f). If your declaration strongly disagrees with the signals, we ask you to confirm it, and the related operation (for example a payout request) is reviewed by a person in our finance team; the check never leads to an automatic refusal on its own. Only connections from comprehensively sanctioned countries cannot register, pay or receive payouts. Raw IP addresses in security logs are kept for at most 180 days, after which only the country code remains; the IP on records that prove acceptance of the membership terms and electronic acceptance of contracts is kept for the limitation period of the claim the record proves. You can exercise your rights, including the right to object to a decision based solely on automated processing (GDPR Art. 22, KVKK Art. 11(g)), at [email protected].