Privacy Notice

1. Who is responsible for your data

The controller of your personal data is MOBIM Yazılım ve Danışmanlık Hizmetleri A.Ş. ("FieldCo CRM", "we", "us").

Address: Yıldız Teknik Üniversitesi Teknopark, İkitelli O.S.B. , Başakşehir / İstanbul (34490)

Contact and requests: ozan@mobimyazilim.com

The controller is established in Türkiye and also has obligations under the Turkish Personal Data Protection Law No. 6698 (KVKK).

2. Personal data we process

When you use the trial sign-up form and your account, we process data in the following categories:

• Identity and contact: your name and email address.
• Customer information: company name, industry and sample-data language preference, and the company code and username generated for you.
• Account security: your password is stored only as a hash; a temporary password generated by the system is shown to you and sent by email, and you are asked to change it at first login.
• Transaction security and technical records: IP address, browser information and time of the request (used for rate limiting and to prevent abuse and automated sign-ups; these may also appear in our infrastructure providers' logs).
• Consent record: a record showing that you acknowledged this notice (email, time of acknowledgment, notice version and language).

3. Why we process your data

We do not use your data to send marketing or promotional messages unless you have separately and expressly agreed to receive them.

• To create your free trial account (company and administrator user) and provide the service.
• To send you your login details and account-related notices by email, and to load sample data in the industry and language you choose.
• To keep the service secure and to prevent abuse and automated or fraudulent sign-ups.
• To respond to your support requests and communicate with you about the service.
• To comply with our legal obligations and to keep the records needed to establish, exercise or defend legal claims.

4. How we collect data and our legal bases

We collect your data electronically and automatically through the sign-up form on our website.

If you are in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR: Article 6(1)(b), where processing is necessary to take steps at your request before entering into a contract or to perform it (creating and providing your trial account); and Article 6(1)(f), our legitimate interests in keeping the service secure and preventing abuse, provided these are not overridden by your interests or fundamental rights. We also process some data to comply with legal obligations and to establish, exercise or defend legal claims.

5. Sharing and storing data outside your country

FieldCo CRM is delivered using cloud infrastructure services. As a result, your personal data is processed and stored on servers located outside your country and outside Türkiye. Server location country or region(s): data centers outside your country and outside Türkiye (contact us for details).

Recipient categories and purposes: (a) our database, authentication and file storage provider (to provide the service); (b) our hosting and content delivery provider (to run the website and application); (c) our email delivery provider (to send login details and notices). These providers process your data only on our instructions and to the extent the service requires. We do not sell your personal data, and we do not share it with third parties for advertising purposes.

If you are in the EEA or the United Kingdom, transfers of your data outside those regions rely on an adequacy decision (including the EU-US Data Privacy Framework for certified recipients) or on Standard Contractual Clauses.

For more detail about the countries involved and the safeguards used, contact us at ozan@mobimyazilim.com.

6. How long we keep your data

We keep your data while your account is active and for as long as the purpose of processing requires. When the trial ends, your account moves to the Free plan and your data is not deleted. When you ask us to delete your account, or the account is closed, your data is deleted, destroyed or anonymized, subject to any legal retention obligations and applicable limitation periods for possible disputes.

The consent record may be kept for the relevant limitation periods because we need to be able to prove it.

7. Your rights

Depending on where you live, you may have the following rights regarding your personal data. You can exercise them by contacting us.

Under the GDPR and UK GDPR (EEA and UK):

• Access: obtain confirmation of whether we process your data and receive a copy.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure: have your data deleted in the circumstances provided by law.
• Restriction: ask us to limit how we process your data in the circumstances provided by law.
• Portability: receive your data in a structured, commonly used, machine-readable format where the law provides for it.
• Objection: object to processing based on our legitimate interests.
• Complaint: lodge a complaint with your local supervisory authority.

8. How to make a request

Send your request to ozan@mobimyazilim.com, with enough information for us to verify your identity. We will respond without undue delay and within the time limits set by the law that applies to you. For California residents, we respond within 45 days, and may extend this once by a further 45 days where reasonably necessary, in which case we will let you know.

If you are not satisfied with our response, you may lodge a complaint with your local data protection supervisory authority. Exercising your rights will not result in discriminatory treatment.

9. Data security

We take appropriate technical and organizational measures to protect your personal data against unlawful processing and unauthorized access: communications are encrypted (TLS), passwords are stored as hashes, separation of data between companies is enforced with database-level access rules, access is authorized, and abuse-prevention measures such as rate limiting are applied.

10. Your acknowledgment and its record

The sign-up form asks you to confirm that you have read this notice and understand that your data will be processed on servers outside your country and outside Türkiye. Registration cannot be completed without this confirmation. This confirmation is not the legal basis for the processing needed to provide the service; it only confirms that you have been informed.

For evidence purposes, we keep a record of your confirmation together with its time and the version and language of this notice.

11. Minors

FieldCo CRM is intended for business use and is not directed at minors. If we become aware that we hold data relating to a minor, we will take the steps needed to delete it.

12. Changes to this notice

We may update this notice to reflect changes in the law or in our service. The current version is published on this page, and the "Last updated" date and version appear at the top of the page. For material changes, we will notify you again where required.

13. Additional information for users in specific regions

European Economic Area and United Kingdom: if you are in the EEA or the UK, the GDPR or UK GDPR applies to the processing of your personal data as described in this notice. The legal bases are set out in section 4, international transfers in section 5, and your rights, including the right to lodge a complaint with a supervisory authority, in sections 7 and 8.

California: if you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) gives you the right to know what personal information we collect, use and disclose; the right to delete your personal information; the right to correct inaccurate personal information; and the right to opt out of the sale or sharing of your personal information. We do not sell your personal information and we do not share it for cross-context behavioral advertising. We will not discriminate against you for exercising these rights. You can make a request at ozan@mobimyazilim.com; we respond within 45 days, which may be extended once by a further 45 days.

If you are located elsewhere and are subject to another country's data protection law, the rights you have under that law remain unaffected, and you may send requests about them to the same address.