Privacy Policy

Truemap Bilişim Teknolojileri Limited Şirketi ("Truemap", "we", "us", or "our") respects your privacy and is committed to protecting personal data processed in connection with our websites, digital platforms, products, services, communications, and business operations.

This Privacy Policy explains how we collect, use, store, disclose, transfer, and otherwise process personal data when you:

• visit truemap.io or other websites operated by Truemap;
• access or use Truemap's digital location management platform or related services;
• communicate with us through contact forms, email, telephone, meetings, events, or other channels;
• request information, a demonstration, proposal, or support;
• subscribe to newsletters or other communications;
• represent a customer, prospective customer, supplier, partner, or other organization that interacts with Truemap; or
• otherwise interact with Truemap.

Truemap provides technology and services designed primarily for businesses with one or more physical locations. Our services may include digital location management, location data synchronization, review management, local SEO, map advertising, analytics, reporting, artificial intelligence-assisted functions, and related business tools.

This Privacy Policy has been prepared with regard to applicable data protection legislation, including the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the General Data Protection Regulation (EU) 2016/679 ("GDPR").

This Privacy Policy does not replace any customer-specific data processing agreement, service agreement, order form, privacy notice, or other contractual arrangement entered into between Truemap and its customers.

For personal data for which Truemap determines the purposes and means of processing, the data controller is:

Truemap Bilişim Teknolojileri Limited Şirketi

Address:
KANDİLLİ MAH. RASATHANE CAD. KANDİLLİ RASATHANESİ
DEPREM ARAŞTIRMA ENSTİTÜSÜ NO: 104 /13 İÇ KAPI NO: 2
ÜSKÜDAR/ İSTANBUL
TÜRKİYE

Website:
https://truemap.io

Privacy inquiries:
Please use the contact details published on our Contact page or contact us through the communication channels made available by Truemap.

Where Truemap processes personal data solely on behalf of a corporate customer and in accordance with that customer's instructions, the relevant customer may act as the data controller and Truemap may act as a data processor or service provider.

In such circumstances, requests concerning the underlying personal data should normally be directed to the relevant customer. Truemap will provide reasonable assistance to its customers where required under applicable data protection law and contractual arrangements.

This Privacy Policy applies to personal data processed through Truemap's corporate website and, where applicable, Truemap-operated platforms and services.

It may cover:

• website visitors;
• users of Truemap services;
• authorized customer users;
• representatives and employees of customers;
• prospective customers;
• suppliers and business partners;
• individuals who contact Truemap;
• individuals who register for events, meetings, demonstrations, or newsletters; and
• other individuals whose personal data may be processed in connection with our legitimate business activities.

Certain Truemap services may be subject to additional or more specific privacy notices. Where a specific notice conflicts with this Privacy Policy in relation to a particular processing activity, the more specific notice will generally apply to that activity.

Depending on your relationship and interaction with Truemap, we may process the following categories of personal data.

4.1 Identity Information

This may include:

• first name;
• last name;
• job title;
• department;
• organization or employer;
• username or account identifier; and
• other identification information voluntarily provided to us.

4.2 Contact Information

This may include:

• corporate email address;
• telephone number;
• business address;
• organization name;
• communication preferences; and
• information submitted through contact or support forms.

4.3 Account and Authentication Information

Where account-based services are provided, we may process:

• account identifier;
• username;
• authentication status;
• role and authorization information;
• account creation date;
• last login information;
• security-related account events; and
• technical identifiers associated with authentication.

Passwords should normally be stored only in appropriately protected or cryptographically processed form where Truemap operates the relevant authentication system.

4.4 Business Location Information

Our services are designed to manage digital representations of physical business locations. We may therefore process information such as:

• business names;
• branch names;
• physical addresses;
• latitude and longitude;
• telephone numbers;
• websites;
• business categories;
• opening hours;
• accessibility information;
• photographs;
• service descriptions;
• social media details;
• business attributes; and
• other location-related information.

Much of this information relates to businesses rather than identifiable natural persons. However, certain business information may constitute personal data where it identifies or relates to an individual.

4.5 Communications and Support Information

When you communicate with us, we may process:

• the content of emails;
• contact form submissions;
• support requests;
• meeting notes;
• telephone-related records;
• correspondence history;
• customer service information; and
• feedback provided to Truemap.

4.6 Device and Technical Information

When you access our websites or services, certain technical information may be collected automatically, including:

• IP address;
• device type;
• operating system;
• browser type and version;
• language settings;
• device identifiers;
• approximate geographic region derived from technical information;
• referring URL;
• requested pages;
• timestamps;
• session information;
• network information;
• diagnostic data;
• application logs; and
• security events.

4.7 Usage and Analytics Information

We may process information concerning how users interact with our websites and services, such as:

• pages visited;
• features used;
• navigation paths;
• buttons or links clicked;
• session duration;
• interaction timestamps;
• aggregated usage statistics;
• service performance information; and
• feature adoption information.

Where legally required, non-essential analytics technologies will be activated only after the appropriate consent has been obtained.

4.8 Marketing Information

Where permitted by law, we may process:

• newsletter subscription status;
• marketing preferences;
• campaign interactions;
• email engagement information;
• event participation;
• requests for demonstrations;
• interests expressed regarding our services; and
• communication history with our sales or marketing teams.

4.9 Customer Review and Public Platform Information

Where Truemap provides review management, digital location management, or related services, information made available through digital map platforms, search engines, review platforms, or other third-party services may be processed.

Such information may include:

• public reviews;
• display names;
• ratings;
• comments;
• review timestamps;
• responses;
• publicly available profile information; and
• other content published through relevant third-party platforms.

The processing of such information may be performed on behalf of our business customers and may be subject to the terms and privacy policies of the relevant third-party platform.

4.10 Contractual and Commercial Information

For customers, suppliers, and business partners, we may process:

• contract information;
• billing and invoice information;
• authorized contacts;
• subscription or service plan information;
• transaction-related records;
• commercial correspondence; and
• records required for accounting, tax, audit, or legal compliance.

We do not intentionally collect payment card information through our general corporate website unless a specific payment functionality expressly provides for such processing.

We may collect personal data from several sources.

5.1 Directly From You

For example, when you:

• submit a contact form;
• contact us by email or telephone;
• request a demo;
• create or use an account;
• subscribe to communications;
• participate in a meeting or event;
• enter into a commercial relationship with Truemap; or
• communicate with our support, sales, or other teams.

5.2 From Our Customers

Corporate customers may provide personal data concerning authorized users, employees, representatives, branch contacts, or other persons for the purpose of receiving our services.

5.3 Automatically

Technical and usage information may be generated when you access Truemap websites or services, including through server logs, browser technologies, cookies, security systems, and similar technologies.

5.4 From Third-Party Platforms

Where necessary to provide our services, we may receive or access information from digital map providers, search engines, review services, advertising platforms, analytics services, social platforms, or other third-party services.

5.5 From Publicly Available Sources

Certain business location and publicly published information may be obtained from publicly accessible sources where permitted by applicable law.

5.6 From Business Partners and Service Providers

We may receive limited information from vendors, partners, integration providers, event organizers, and service providers where necessary for legitimate business activities.

We may process personal data for the following purposes.

6.1 Providing and Operating Our Services

We may use personal data to:

• provide digital location management services;
• manage customer accounts;
• maintain location information;
• synchronize business information;
• manage reviews and customer feedback;
• produce reports and analytics;
• deliver location SEO services;
• support map-related advertising activities;
• operate dashboards and management panels;
• provide integrations;
• manage customer configurations; and
• perform our contractual obligations.

6.2 Customer Support

We may process information to:

• respond to questions;
• investigate technical issues;
• resolve support requests;
• communicate service notices;
• provide onboarding and training; and
• manage customer relationships.

6.3 Improving Our Services

We may analyze service usage and performance to:

• improve product functionality;
• understand feature usage;
• identify errors;
• improve user experience;
• develop new functionality;
• optimize system performance; and
• understand customer needs.

Where appropriate, we may use aggregated or de-identified information for statistical, research, and product-development purposes.

6.4 Artificial Intelligence and Automated Functions

Certain Truemap services may use artificial intelligence, machine learning, automation, or algorithmic systems to assist with activities such as:

• categorizing reviews;
• generating suggested review responses;
• analyzing location performance;
• identifying inconsistencies in location information;
• producing insights;
• prioritizing operational actions; and
• assisting users with content or workflow management.

Unless specifically stated otherwise, AI-assisted functionality is intended to support human decision-making rather than make legally significant decisions about individuals without appropriate safeguards.

We encourage customers and users to review AI-generated suggestions before relying on or publishing them.

6.5 Security and Fraud Prevention

We may process information to:

• authenticate users;
• control access;
• detect unauthorized activity;
• investigate suspicious behavior;
• maintain system integrity;
• prevent fraud and abuse;
• protect our infrastructure;
• maintain logs; and
• enforce security policies.

6.6 Sales and Business Development

We may process professional contact information to:

• respond to requests for information;
• schedule demonstrations;
• prepare proposals;
• manage prospective customer relationships;
• follow up on business inquiries; and
• communicate about Truemap services.

6.7 Marketing Communications

Subject to applicable law and required consent, we may send:

• newsletters;
• service announcements;
• product updates;
• invitations;
• educational content;
• surveys;
• promotional communications; and
• information about relevant Truemap services.

You may unsubscribe from optional marketing communications at any time using the mechanism provided in the relevant message or by contacting us.

6.8 Legal and Regulatory Compliance

We may process and retain information where necessary to:

• comply with laws and regulations;
• comply with court orders;
• respond to lawful requests from competent authorities;
• maintain tax and accounting records;
• establish or defend legal claims;
• conduct audits; and
• protect Truemap's legal rights.

Where KVKK applies, personal data is processed in accordance with the processing conditions set out under applicable Turkish data protection legislation.

Depending on the activity, the legal basis may include:

• explicit consent;
• necessity for the establishment or performance of a contract;
• compliance with a legal obligation;
• establishment, exercise, or protection of a legal right;
• processing of data made public by the data subject within the limits of the purpose for which it was made public; or
• legitimate interests of Truemap, provided that such interests do not violate the fundamental rights and freedoms of the relevant individual.

Where GDPR applies, processing may be based on:

• consent;
• performance of a contract or steps taken prior to entering into a contract;
• compliance with legal obligations;
• protection of vital interests where applicable;
• legitimate interests pursued by Truemap or a third party where those interests are not overridden by the rights and freedoms of the individual; or
• another lawful basis recognized under applicable law.

Where we rely on consent, you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

In certain circumstances, Truemap processes personal data on behalf of its corporate customers.

For example, a customer may use Truemap to manage location-related information, reviews, authorized account users, reporting data, or other information associated with its operations.

In these circumstances:

• the customer determines the purposes of processing;
• Truemap processes information according to documented instructions and contractual obligations;
• Truemap may use authorized subprocessors where permitted;
• appropriate technical and organizational security measures are applied; and
• the customer's privacy notice may govern the underlying relationship with the individuals concerned.

Where required, Truemap may enter into a data processing agreement with the relevant customer.

We do not sell personal data.

We may disclose personal data to the following categories of recipients where necessary and legally permitted.

9.1 Service Providers

These may include providers of:

• cloud infrastructure;
• hosting;
• email services;
• analytics;
• communication tools;
• customer support systems;
• security services;
• database services;
• backup services;
• content delivery services;
• software development tools; and
• other technical infrastructure.

Service providers are expected to process information only for authorized purposes and subject to appropriate contractual and security requirements.

9.2 Digital Platform Providers

To provide our location management services, information may be exchanged with relevant:

• digital map platforms;
• search engines;
• review platforms;
• advertising platforms;
• social networks; and
• other location-based services.

The use of such third-party services may also be governed by the third party's own terms and privacy policies.

9.3 Professional Advisers

Information may be disclosed to:

• lawyers;
• accountants;
• auditors;
• consultants; and
• other professional advisers,

where reasonably necessary.

9.4 Authorities

We may disclose information to courts, regulators, law enforcement agencies, tax authorities, administrative bodies, or other competent public institutions where legally required.

9.5 Corporate Transactions

If Truemap is involved in a merger, acquisition, investment, financing, restructuring, sale of assets, or similar transaction, information may be disclosed to relevant parties subject to appropriate confidentiality and legal safeguards.

Truemap may use service providers or technology platforms whose infrastructure, personnel, or systems are located outside Türkiye or outside the country in which the relevant individual is located.

Where personal data is transferred internationally, Truemap will take measures required under applicable data protection legislation.

Depending on the circumstances, these safeguards may include:

• an applicable adequacy decision;
• standard contractual clauses;
• standard contracts or other transfer mechanisms recognized under Turkish data protection legislation;
• binding corporate rules where applicable;
• contractual, technical, and organizational safeguards; or
• another legally permitted transfer mechanism.

International transfers will be limited to what is reasonably necessary for the relevant processing purposes.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

Retention periods may depend on:

• the nature of the data;
• the purpose of processing;
• the duration of the customer relationship;
• contractual requirements;
• statutory limitation periods;
• tax, accounting, or commercial record-keeping requirements;
• legal disputes;
• security requirements; and
• applicable regulatory obligations.

As a general principle:

• inquiry and contact information may be retained for a reasonable period after the relevant communication;
• marketing records may be retained until consent is withdrawn, an objection is received, or the applicable internal retention period expires;
• contractual, accounting, and invoice information may be retained for periods required under applicable law;
• security logs may be retained for a period proportionate to security and audit requirements; and
• customer data processed on behalf of customers will be retained according to applicable contractual arrangements and customer instructions.

At the end of the applicable retention period, personal data will be securely deleted, destroyed, anonymized, or otherwise handled in accordance with applicable law.

Truemap implements appropriate technical and organizational safeguards designed to protect personal data against:

• unauthorized access;
• unauthorized disclosure;
• accidental loss;
• alteration;
• destruction;
• misuse; and
• other unlawful processing.

Depending on the system and risk level, safeguards may include:

• access controls;
• authentication mechanisms;
• authorization management;
• encryption;
• secure communications;
• logging;
• monitoring;
• network security;
• backups;
• vulnerability management;
• software update procedures;
• employee access restrictions; and
• incident response procedures.

However, no internet-based service or information system can be guaranteed to be completely secure. Users are also responsible for maintaining the confidentiality and security of their account credentials.

Our websites may use cookies and similar technologies for purposes including:

• website functionality;
• security;
• remembering preferences;
• analytics;
• performance measurement;
• improving user experience; and
• marketing, where legally permitted.

Where required, non-essential cookies will not be activated until you provide the appropriate consent.

For more information, please review our Cookie Policy.

Our websites and services may contain links to or integrations with third-party services, including digital map providers, social networks, video services, analytics providers, communication services, and other external platforms.

Truemap does not control the independent privacy practices of these third parties.

When you leave a Truemap-controlled environment or interact directly with a third-party service, the relevant third party's privacy policy and terms may apply.

We encourage you to review those policies before providing personal information.

Truemap's services are designed primarily for businesses and professional users and are not directed toward children.

We do not knowingly collect personal data directly from children through our corporate website for the purpose of providing consumer-facing services.

If you believe that a child has provided personal data to us inappropriately, please contact us so that the situation can be reviewed.

Where KVKK applies, individuals may have the right, subject to applicable conditions, to:

• learn whether their personal data is being processed;
• request information regarding processing;
• learn the purpose of processing and whether the data is being used consistently with that purpose;
• learn the third parties to whom personal data has been transferred domestically or internationally;
• request correction of incomplete or inaccurate personal data;
• request deletion or destruction of personal data where applicable legal requirements are satisfied;
• request notification of correction, deletion, or destruction operations to third parties to whom data has been transferred where required;
• object to a result arising against the individual through analysis of personal data exclusively by automated systems; and
• request compensation where damage has been suffered as a result of unlawful processing.

Requests will be handled in accordance with applicable procedures and statutory response periods.

Where the GDPR applies, you may have rights including:

• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restriction of processing;
• the right to data portability;
• the right to object to certain processing;
• rights relating to automated decision-making;
• the right to withdraw consent; and
• the right to lodge a complaint with a competent supervisory authority.

These rights may be subject to conditions, exceptions, or limitations under applicable law.

You may opt out of non-essential marketing communications at any time.

Opting out of marketing messages will not prevent Truemap from sending necessary service-related communications, including:

• security notices;
• administrative communications;
• contractual messages;
• account-related information; or
• important service updates.

Truemap may use automated tools to analyze service data and provide recommendations, classifications, alerts, or insights.

Unless specifically disclosed otherwise, Truemap does not intend to use automated processing to make decisions that produce legal effects or similarly significant effects concerning website visitors or ordinary users without appropriate safeguards.

AI-generated or algorithmically generated suggestions should be reviewed by authorized users where appropriate before business decisions are made.

We may update this Privacy Policy from time to time to reflect:

• changes to our services;
• changes to our technology;
• legal or regulatory developments;
• changes to our processing activities; or
• improvements to our privacy practices.

The updated version will be published on our website with a revised "Last Updated" date.

Where required by law, additional notice or consent will be provided.

Questions, requests, or concerns relating to this Privacy Policy or Truemap's processing of personal data may be submitted through Truemap's official contact channels.

Truemap Bilişim Teknolojileri Limited Şirketi
KANDİLLİ MAH. RASATHANE CAD. KANDİLLİ RASATHANESİ
DEPREM ARAŞTIRMA ENSTİTÜSÜ NO: 104 /13 İÇ KAPI NO: 2
ÜSKÜDAR/ İSTANBUL
TÜRKİYE

Website: https://truemap.io

Data protection requests may also be submitted through the contact mechanisms specified in Truemap's applicable KVKK information notices.

We may request reasonable information necessary to verify your identity before responding to a data protection request.