1. Data controller and scope
This notice explains how Tecof processes personal data of visitors and panel users of the Tecof platform (tecof.com and app.tecof.com) in its capacity as data controller. For questions and requests, write to info@tecof.com.
An important distinction: for stores built with Tecof, the controller of end-customer data (orders, addresses, contact details) is the store owner; Tecof acts as a processor on the store owner's instructions. If you shopped at such a store, please contact that store first.
2. Data we process
- Account and identity data: name, email, phone, password hash, team membership and permissions.
- Store and content data: pages you create, products, media files, theme settings, orders and customer records.
- Payment and billing data: plan, amount, billing title, tax/identity number and payment result. Card number, expiry date and CVV are never stored on Tecof systems; payments are collected by licensed payment institutions (iyzico, PayTR) on their own infrastructure.
- Technical data: IP address, device and browser information, session and error logs, security records.
- Usage data: in-panel activity records (audit log), feature usage and credit consumption.
- Communication data: support requests, form submissions and newsletter sign-ups.
3. Purposes and legal bases
We process data to set up and deliver the service, secure your account, run subscriptions and billing, provide support, improve the product and meet legal obligations. Legal bases are performance of a contract (account, subscription, orders), legal obligation (invoicing, tax and retention duties), legitimate interest (security, abuse prevention, product improvement) and, where required, explicit consent (marketing messages, non-essential cookies).
4. AI features
When you use AI features such as copy, image or site generation, the input you provide for that operation (your prompt and the content you select) is sent to the model provider serving the request and the output is returned to you. These features are optional; unless you use them, your content is not sent to model providers.
5. Recipients
Data is shared only as far as the service requires and under contractual safeguards with: hosting and infrastructure providers, payment institutions (iyzico, PayTR), email and notification providers, AI model providers, analytics providers and legally authorised public authorities. We do not sell your data for advertising.
6. Retention and deletion
Data is kept for as long as the relevant purpose requires and for the mandatory retention periods set by law, then deleted or anonymised. When you close your account, your store content is removed, subject to statutory retention periods for commercial and financial records.
7. Security
Traffic is encrypted with TLS, passwords are stored irreversibly, panel access is limited by role and team permissions, and administrative actions are written to an audit log. No system can promise absolute security, so please use a strong password and never share your credentials.
8. Cookies
Essential cookies keep your session and security working and cannot be disabled. Preference, measurement and marketing cookies run only with your consent, which you can change at any time from the cookie banner. You can also delete or block cookies in your browser settings.
9. Your rights
You have the right to learn whether your data is processed, request information about it, learn the purpose of processing and whether it is used accordingly, know the third parties to whom it is transferred at home or abroad, request correction of incomplete or inaccurate data, request erasure or destruction where the conditions are met, request that such actions be notified to recipients, object to results produced solely by automated analysis and claim compensation for damage caused by unlawful processing.
Send your requests to info@tecof.com; we respond within the period set by law.
10. Changes
This policy may be updated as the service or the law changes. The current version is always published on this page, and material changes are announced in the panel or by email.