Privacy Policy

1. Controller

The operator whose details are given in the imprint is the controller of your personal data. For data requests, you can write to the address on the Contact page. For users in Turkey, the KVKK Information Notice under the Turkish Personal Data Protection Law No. 6698 (KVKK) also applies.

2. Data we process

Account: full name, email address, password (only a non-reversible hash), interface language.

Company and employee: company name, tax number, address, phone, role and employee number.

Platform use: loads, offers, orders, messages, ratings and notifications.

Driver: name, phone; while location sharing is turned on in the driver app, the location about every 10 minutes (only the latest point and the nearest city name are stored, and they are visible only to the two companies of the order); CMR notes, delivery notes and delivery photos uploaded by the driver.

Technical: IP address, browser information and session records; for security and rate limiting.

3. Purposes

Creating and verifying accounts and companies; handling loads, offers, orders and messaging; tracking transport and its documents; sending service related notifications and emails; preventing fraud and ensuring security; fulfilling legal obligations.

We do not create advertising profiles and we do not sell your data.

4. Legal bases

Conclusion and performance of a contract (Art. 6(1)(b) GDPR): account, loads, offers, orders and messages. Legal obligation (Art. 6(1)(c) GDPR): retention of business records. Legitimate interest (Art. 6(1)(f) GDPR): security, fraud prevention and showing the driver's location to the parties of the order for transport tracking.

Location is collected only when the driver turns on sharing in the app and device permission has been granted; the driver can turn sharing off at any time.

5. Who we share data with

The other party to the job: the other company in a load, offer or order sees the information needed to carry out the job (company and person name, messages, driver name, masked phone number, licence plate, location and documents).

Hosting: the platform and database run on a virtual dedicated server (VDS) rented by the operator.

Maps: map tiles are loaded into your browser from OpenFreeMap. No account or location data is sent; as with any web request, only the browser's technical request and IP address reach the tile server.

Postal code data: city codes come from GeoNames (geonames.org) and are used under the CC BY 4.0 licence.

Exchange rates: our server retrieves rates from a public exchange rate service; these requests contain no personal data.

Translation: if automatic message translation is enabled, message text may be processed by an AI translation provider. The provider will be named in this section before it is enabled; automatic translation is currently turned off.

Email: no email delivery provider is connected yet; once connected, it will be named in this section.

Competent authorities: where required by law.

6. Transfers abroad

The platform operates between Turkey and Europe, and the other party to a job may be in another country. Your data is therefore transferred to the company in that country so the job can be carried out. The server location and the legal basis for transfers abroad (for example EU standard contractual clauses or safeguards under Art. 9 KVKK) will be stated clearly in this section once the company structure is settled.

7. Retention periods

Account data is stored until your account is deleted.

Loads, offers, orders and messages are kept after the account is deleted because they are part of the other party's business records and serve as evidence in disputes; your name and contact details are removed. Statutory retention periods apply to business records.

For driver location, only the latest point is kept, and each new point replaces the previous one. Uploaded documents are stored together with the order they belong to. Session records are deleted when the session ends.

8. Your rights

You have the right to access your data, to request its rectification, erasure and restriction of processing, to object to processing, to receive your data in a portable format and to withdraw your consent. You can download your data and delete your account under My company > My account.

You can also lodge a complaint with the data protection authority in your country of residence (in Turkey, the Turkish Personal Data Protection Authority).

9. Security

Passwords are stored as non-reversible hashes, session cookies are not accessible to browser scripts, uploaded documents are accessible only to the parties of the order, and employee access is limited by role and permissions.

10. Changes

If this policy changes, the current version is published on this page and users are notified of significant changes. The platform is not intended for persons under 18.