Personal data notice (KVKK)
Last updated: 19 October 2026
This notice is given under Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (“KVKK”), on the personal data processed through syncbridge.io, the Marketplace, SyncBridge Console and their sign-in pages (“the services”). The privacy policy tells more. The Turkish text prevails.
The data controller
Panates Teknoloji Yatırım A.Ş. (MERSİS No 0721097121900001), Şehit Polis Fethi Sekin Cad. No:4 Novus Tower Ofis:103, 35530 Bayraklı/İzmir, Türkiye - info@panates.com
The personal data processed
- Identity: your first and last name, your username.
- Contact: your e-mail address.
- Visual: your profile photo, if you sign in with Google or GitHub.
- Customer transactions: your workspaces, organizations, memberships and roles, the names, locations and tags you give your servers, your servers’ worker configurations if your workspace keeps them, the packages you publish, activity records and alerts.
- Transaction security: an unreadable digest of your password, your passkeys and two-step verification settings, your IP address, browser and request details, session records.
Purposes and legal grounds
Your personal data is processed for the purposes below, on the legal grounds of Article 5(2) of KVKK:
- Creating your account and providing the services - necessary to make and perform a contract (Art. 5/2-c).
- Verifying your e-mail address, resetting your password and sending the services’ notices - performing the contract (Art. 5/2-c).
- Keeping the services secure, preventing abuse and fixing faults - our legitimate interest (Art. 5/2-f).
- Meeting our legal obligations and the requests of the authorities - a legal obligation (Art. 5/2-ç).
- Establishing, exercising or protecting a right (Art. 5/2-e).
How it is collected
Electronically, by automated and partly automated means: through the registration and sign-in forms, what you do in Console and on the Marketplace, the status your linked servers send to Console, what Google or GitHub share with us if you choose them, and server logs.
Transfers
Limited to the purposes above, your personal data may be transferred to the infrastructure provider that hosts and serves the services (Cloudflare), the e-mail sending provider, the font provider (Google Fonts), and to Google or GitHub only if you choose to sign in with them; and, under a legal obligation, to the competent public authorities.
Some of these providers may process the data abroad. Transfers abroad are made under the conditions and safeguards of Article 9 of KVKK.
Your rights under Article 11 of KVKK
By applying to the data controller, you may use the rights below:
- Learn whether your personal data is processed
- Request information on it if it is
- Learn the purpose of the processing and whether the data is used for it
- Know the third parties, in Türkiye or abroad, it is transferred to
- Ask for it to be corrected if it is incomplete or wrong
- Ask for it to be erased or destroyed under the conditions of Article 7 of KVKK
- Ask for the third parties it was transferred to to be told of the correction, erasure or destruction
- Object to a result against you that comes solely from analysis by automated systems
- Claim compensation if you suffer damage from its unlawful processing
Applying
Send your requests, as the Communiqué on the Procedures and Principles of Applications to the Data Controller provides, in writing to Şehit Polis Fethi Sekin Cad. No:4 Novus Tower Ofis:103, 35530 Bayraklı/İzmir, Türkiye, or from the e-mail address registered with the services to info@panates.com. Your application is answered within thirty days at the latest, as a rule free of charge.
You can also change your name, e-mail address, password, passkeys and two-step verification yourself, in Console’s Security page.