Personal Data Protection Notice

Data controller

For Turkish Personal Data Protection Law No. 6698, the data controller is BYMMB Bilişim Akademi ve Ticaret Limited Şirketi.

Contact: Barbaros Mah. Begonya Sk. Nidakule Ataşehir Batı No: 1 İç Kapı No: 2 Ataşehir, Istanbul, Türkiye. Email: support@xlmindstudio.com. Website: xlmindstudio.com.

Scope

This notice explains processing when a person visits the website, starts a trial, purchases or activates a license, requests support or contacts us.

XLMind Studio's Excel tools run on the user's computer. Excel files, cell contents and worksheet names are not sent to our licensing, payment or website servers and are not shared with artificial intelligence services.

Data processed

Depending on use, we may process:

Name, surname, email, optional phone and billing details.

Order number, plan, price, currency, payment status, transaction time, invoice data and limited records from iyzico.

License key, license type, device limit, activation time, status and a technical device identifier not intended to directly identify the owner.

IP address, user agent, product and version, timestamps, error and security logs.

Support messages and files voluntarily sent by the user.

Language and essential website preferences.

Marketing preferences only where separate consent exists.

We do not store full card numbers or security codes. Payment is processed through iyzico.

Purposes and legal grounds

Data is used for trials, sales, delivery, activation, device management, payment, invoicing, support, security, fraud prevention, updates, legal compliance and legal claims.

Processing relies on contract necessity, legal obligations, establishment or protection of rights and legitimate interests that do not override fundamental rights. Marketing activities requiring consent rely on separate consent.

Collection

Data is collected through forms, purchase and payment pages, license activation, support email, server and security logs and information provided by the user.

Disclosure

Where necessary, data may be disclosed to iyzico and financial institutions, accounting and invoice providers, hosting and email providers, security providers, professional advisers and legally authorized authorities.

Excel files, cell contents and worksheet names are not included.

Retention and security

Data is retained only for the necessary purpose and statutory periods, then deleted, destroyed or anonymized. Reasonable technical and organizational security measures are applied, but no internet system provides absolute security.

Rights and applications

Data subjects may exercise the rights under Article 11 of Law No. 6698, including access, information, correction, deletion where conditions apply, information about recipients, objection to certain automated outcomes and compensation for unlawful processing.

Applications may be submitted in writing to the company address or from an email address already registered in our systems to support@xlmindstudio.com. Requests are handled as soon as possible and no later than 30 days.