GDPR Compliance & Data Privacy

Your Data Rights

Data We Collect

KolayStartup collects the following data to provide and improve our services:

•Profile Information: Name, email, phone, company name, avatar
•Application Data: Your submissions and related information
•Communication Data: Messages, conversations, and notifications
•Business Data: Investor portals, startup profiles, service provider information
•Technical Data: Session logs, IP addresses, device information

Data Retention Policy

Your data is retained according to the following principles:

•Profile Information: While your account is active; anonymized for 30 days after deletion request
•Application Data: 2 years (for legal compliance)
•Messages: 5 years (for audit purposes); anonymized to "[deleted]" upon account deletion
•Notifications: 6 months (automatically deleted)
•Business Data: As long as relevant or until deleted by the owner
•Technical Data: 90 days (automatically deleted)

Your Rights

Under GDPR, you have the following rights:

•Right to Information: Learn what data we have about you
•Right to Access: Obtain a copy of your personal data
•Right to Rectification: Correct inaccurate or incomplete data
•Right to Erasure: Request deletion of your data (Right to be Forgotten)
•Right to Restrict Processing: Limit how your data is processed
•Right to Data Portability: Receive your data in portable format
•Right to Object: Object to data processing

How to Exercise Your Rights

Processing...

For questions about GDPR or data privacy:

Email: privacy@kolaystartup.com

Compliance Note

KolayStartup is fully compliant with GDPR (General Data Protection Regulation) and KVKK (Turkish Data Protection Law). The security and privacy of your data is our highest priority.