Privacy Policy
Last updated: 30 October 2026
This policy explains how personal data is processed when you use Pratienda and the pratienda.com website, under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU GDPR.
1. Controller and processor
Pratienda is operated by Mehmet Emin SARI. Address: Meydankavağı Mah. 1575. Sok. Nazmi Aksu 2 Sitesi Floor 5, Muratpaşa / Antalya, Türkiye. Contact: info@pratienda.com.
Pratienda is a software service that lets sellers manage their marketplace stores (products, stock, prices, orders and customer questions) from one panel.
Pratienda is the controller for the account data of the business using it (the seller) and its staff. For buyer information in orders coming from the seller's marketplaces, the seller is the controller; Pratienda processes that data on the seller's behalf and instructions as a processor.
2. Data we process
- Name, email, company and role (Enda account centre): for sign-in, permissions and notifications.
- Marketplace connection details: store name and seller ID, API key and secret, who entered the key and when: to read your store data on your behalf and carry out the actions you approve.
- Product, stock, price and promotion data (your connected marketplace): to show, report and send the updates you approve.
- Order data (your connected marketplace): buyer name, order lines, amounts and shipping details; delivery address and phone where the marketplace's order record contains them: to show and track orders in the panel.
- Customer questions (your connected marketplace): the asker's name, their email where the marketplace passes it on, and the question text: to show questions and send your answer to the marketplace.
- Company notes and assistant conversations (written by you): to tailor AI suggestions to your business. AI usage is recorded as an amount, without message text.
- Sign-in attempts, IP address and support-access records (system): for security, abuse prevention and legal obligations.
We never ask for your marketplace password; the connection uses an API key you create in the marketplace's seller panel. Card and payment details stay with the marketplace and never reach Pratienda.
3. Purposes and legal bases
- Performance of the contract: account, store management, reports, suggestions and the actions you approve.
- Legal obligation: invoicing and accounting records, requests from authorities.
- Legitimate interest: security, debugging and improving the service (with aggregate measurements).
- Consent: only where required (e.g. marketing emails) and asked for separately.
- Buyer data is processed so the seller can perform its sales contract on the marketplace, on the seller's instructions.
4. Use of marketplace data
- Data from the stores you connect is used only to provide Pratienda to you; it is not sold, not used for advertising and not shared with other companies.
- Features that write to marketplaces, such as price rules, product publishing, AI and advertising actions, stay off until they are enabled for your company. Automatic repricing runs in suggestion mode by default; suspicious prices are never sent without your approval.
- Each company sees only its own data; this separation is also enforced at database level.
- Pratienda follows the seller rules and API terms of the connected marketplaces (currently Trendyol, Hepsiburada and N11).
5. Transfers
- Hosting: our servers are in Türkiye (Netinternet).
- AI: messages you write to the assistant, the customer question you ask a suggestion for and the product summaries needed are sent to our AI provider (Anthropic PBC, USA; Google LLC as a fallback) to generate a reply.
- Email delivery: your email address is passed to our email delivery service for notifications.
- Marketplaces: updates you approve and answers you send are passed to the relevant marketplace.
- Authorities: only where the law requires it.
6. Retention
- Marketplace API keys: deleted when the connection is removed.
- Order, product and question data: for the duration of the subscription; deleted within 90 days after it ends.
- Assistant conversations: 12 months. Sign-in and security logs: 2 years. Invoicing records: the statutory period (10 years).
7. Data deletion
- To cut access immediately, renew or delete the API key you gave Pratienda in the marketplace's seller panel; the old key stops working at once.
- To delete the connection and all data, email info@pratienda.com from your registered address with the subject "Delete my Pratienda data". Your request is completed within 30 days and you are notified.
- Buyers should send requests about their order data to the seller they bought from; when the seller forwards them to us, we carry them out on the seller's behalf.
8. Your rights
You may ask whether your data is processed, request information, learn whether it is used for its purpose, know the third parties it is transferred to, request correction, deletion or destruction and notification of these to recipients, object to a result against you arising from automated analysis, and claim compensation for damage. Under the GDPR you also have the rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your supervisory authority.
Requests: by email to info@pratienda.com or in writing to Meydankavağı Mah. 1575. Sok. Nazmi Aksu 2 Sitesi Floor 5, Muratpaşa / Antalya, Türkiye. We reply within 30 days.
9. Security
Connections are encrypted with HTTPS; marketplace API keys are stored encrypted and never shown again after entry; panel sign-in goes through the account centre and repeated failed attempts are blocked. Support access is time-limited (1 hour), read-only, logged and shown to the company.
10. Cookies
The panel uses strictly necessary cookies for the session and security (CSRF) and one cookie that remembers your language (1 year). pratienda.com and the panel use no advertising or tracking cookies.
11. Changes
When we update this policy we change its date and announce important changes by email.