Privacy Policy

Data Controller

Data controller: ATOMRON TEKNOLOJİ LİMİTED ŞİRKETİ, Arnavutköy Mah. Sucubahçesi Sk. No: 31 İç Kapı No: 4, Beşiktaş / İstanbul. Contact: support@fiyox.com.

2.1 Data We Process

• Name, email address and, if supplied by the user, telephone number.
• Company, account and profile information.
• IP address, device/browser information, session, security and usage/log records.
• Cookie, preference and analytics data.
• Limited subscription, transaction and billing records.
• Support requests and communications.
• Uploaded PDF, Excel and other documents and product, supplier, customer, pricing and other commercial information contained in them.

2.2 Purposes and Legal Bases

Data may be processed to enter into and perform the service contract, operate accounts and services, provide document/OCR/AI functions, administer subscriptions and support, protect security and prevent fraud, comply with legal obligations, measure and improve the service and pursue legitimate interests where applicable. Marketing and non-essential cookie processing that requires consent is based on the relevant choice or consent.

2.3 OCR/AI and User Documents

Uploaded documents may be processed by automated document-processing, OCR and AI systems. Where necessary to provide the service, limited data may be processed by contracted technology/OCR/AI providers. Relevant disclosures and, where appropriate, a subprocessor list may be updated when specific providers are finalized.

2.4 Service Providers

• Microsoft Azure — cloud infrastructure and hosting.
• Cloudflare — security, network and performance.
• Google Analytics — usage analytics.
• Paddle, Stripe, iyzico, PayTR and/or other payment/reseller providers identified during the transaction — payments, subscriptions, billing and, where applicable, Merchant of Record services.
• OCR/AI, email and communications providers — to provide the relevant service functions.

2.5 International Transfers

Cloud, security, analytics, payment and other technology providers may operate infrastructure in different countries. Personal data may therefore be processed or stored across borders. Appropriate contractual, technical and organizational safeguards are used where required by applicable data-protection law.

2.6 Cookies and Analytics

Fiyox may use technologies required for core functionality and security. Non-essential analytics technologies such as Google Analytics are enabled according to user choices/consent where applicable law requires it. See the Cookie Policy for more information.

2.7 Marketing

Marketing emails are sent in accordance with applicable consent and preference requirements and include an unsubscribe mechanism. Security, password reset, billing and service notices are operational communications and are separate from marketing.

2.8 Retention and Deletion

Following a valid account/data deletion request, relevant data is deleted or anonymized from active systems within 15 days. Copies in technical backups are removed through the normal backup lifecycle within 90 days. Records required for tax, accounting, fraud prevention, disputes or other legal obligations may be retained for the required period.

2.9 Rights

Depending on applicable law, you may have rights to access, correct or delete personal data, receive information about processing, object to processing, withdraw consent and, where applicable, request data portability. Requests may be sent to support@fiyox.com.

2.10 Security and Minors

Fiyox uses reasonable technical and organizational safeguards, but no electronic system can guarantee absolute security. The service is not intended for persons under 18.