Privacy Policy

Data controller

The data controller is Yusa Ozturk (Komutam). You can reach us at destek@komutam.com.

Data we process

• Account details: your email address and password. Your password is stored only as a one-way hash; we cannot see it. If you sign in with Google or Apple, the email address and account ID that provider shares with us.
• Workspace content: workspaces, projects, milestones, tasks and their dependencies, daily plans, time entries, client records, income and expense records, reminders and workspace memberships.
• Usage limit record: how many planning suggestions you request per day, to limit abuse.
• Technical logs: server logs kept by our hosting and database providers for security and operations (such as IP address, browser details and request time).

We use no advertising, analytics or tracking tools. The komutam.com website sets no cookies and stores nothing in your browser. The app uses your browser’s or phone’s storage to keep you signed in and to remember preferences such as language and theme.

Purposes and legal grounds

• Creating your account, signing you in and providing the service: performance of a contract (KVKK art. 5/2-c; GDPR art. 6(1)(b)).
• Sending account verification and password reset emails: performance of a contract.
• Keeping the service secure, preventing abuse and fixing errors: legitimate interests (KVKK art. 5/2-f; GDPR art. 6(1)(f)).
• Meeting our legal obligations (KVKK art. 5/2-ç; GDPR art. 6(1)(c)).

We do not sell your data or use it for advertising.

Planning suggestions

Planning suggestions are currently rule-based; your tasks are not sent to an AI provider. If we add an AI provider, we will describe on this page, before it starts, which data it receives. Suggestions are never applied without your approval.

Who we share data with

To provide the service, we share data only with the following service providers, on our behalf and only as needed:

• Supabase: database and authentication. Your data is stored on servers in Frankfurt, Germany.
• Vercel: hosting for the website and the app.
• Resend: delivery of account emails.
• Google and Apple: only if you choose to sign in with those accounts.

These providers’ servers are outside Turkey (in the European Union and the United States); when you use the service, your data is processed on them. Your workspace content is visible only to the members you invite to that workspace, as far as their role allows. We may share data with authorities when the law requires it.

How long we keep data

We keep your data while your account is open. When you ask us to delete your account, we delete it together with the content of workspaces that belong only to you; records we must keep by law are kept until that period ends. Server logs are deleted when the providers’ limited log retention periods end.

Your rights

Under KVKK article 11 you can ask whether your personal data is processed, request information about it, learn why it is processed and whether it is used for that purpose, know who receives it, have incomplete or incorrect data corrected or deleted, have those changes passed on to recipients, object to a result against you that comes only from automated analysis, and claim compensation for damage caused by unlawful processing. If you live in the European Union, you also have the GDPR rights of access, rectification, erasure, restriction, portability and objection.

Send requests from your account’s email address to destek@komutam.com. We resolve requests free of charge within 30 days. You may also complain to the Turkish Personal Data Protection Authority or your local data protection authority.

Security

Connections are encrypted with HTTPS. Database access rules let you reach only the data of workspaces you are a member of. Changing your password requires your current password.

Children

Komutam is not designed for children under 16.

Changes

When we update this policy we change the date above. We announce significant changes before they take effect.