GDPR Notice

1. Controller

Işık Taner Çelik (Scope Trends), Merkez Mah. Hasak Sk. Kamara No:52 Kapı No:1, Şişli / İstanbul / Türkiye. Phone: +90 216 606 38 09. Email: [email protected]

2. Categories of personal data

• Identity and contact data: name, email address.
• Account and transaction data: plan, subscription, credit usage, invoice records.
• Security data: password hash, IP address, device fingerprint, login records, phone number hash (when phone verification is requested).
• Connected account data: data imported from Google Search Console, Google Analytics, Google Ads and similar accounts you choose to connect, and the access tokens for those accounts.
• Workspace content: the domains, brands, competitors, keywords and personas you track.
• Analytics data (only with your consent): the address of the page visited, the referring page, page title, browser, operating system, device type, screen resolution, language, approximate location (country and city level), on-page interactions and Google Analytics cookie identifiers. We do not send your name, email address or workspace data. Details in section 8 of our Privacy Policy.

3. Purposes and legal bases (Art. 6)

• Providing the Service, running your account and processing connected account data: performance of a contract (Art. 6(1)(b)).
• Billing and keeping records required by law: legal obligation (Art. 6(1)(c)).
• Security, preventing trial abuse and improving the Service: legitimate interests (Art. 6(1)(f)).
• Measuring how the site and the app are used with Google Analytics: consent (Art. 6(1)(a)), given by choosing Accept in the cookie card. Without your consent Google Analytics is not loaded and no analytics data is processed.
• Optional communications where required: consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Processors

We use the following categories of processors, bound by data processing terms: hosting and cloud infrastructure providers, AI processing providers, payment service providers and email delivery providers. For Google Analytics, only if you consent, we use Google (Google LLC; Google Ireland Limited for the European Economic Area and Switzerland). Google signals and ad personalization are turned off, and we do not use analytics data for advertising, retargeting or personalized ads. We do not sell personal data. Google user data is not used or transferred to train generalized AI models.

5. International transfers

Scope Trends is operated from Türkiye, and some of our processors store or process data outside the EEA. Where personal data is transferred to a country without an adequacy decision, the transfer is made under the safeguards required by the GDPR.

Google Analytics data may be processed on Google's servers outside the EEA, including in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, and transfers to Google LLC in the United States rely on the European Commission's adequacy decision for that framework. No such transfer takes place unless you consent to Google Analytics.

6. Withdrawing consent

You can withdraw your consent to Google Analytics at any time from the “Cookie preferences” link at the bottom of the page or on the Settings page in the app, or here. When you withdraw, measurement stops, the _ga cookies in your browser are deleted and no new ones are set. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal (Art. 7(3)).

7. Retention

We keep personal data for as long as your account is open and for any period required by law. When you disconnect an integration, the access tokens for it are deleted. When you ask us to delete your account or imported data, we delete or anonymize it within 30 days, except for records we are legally required to keep. Event-level data in Google Analytics is deleted automatically at the end of the period set in our account settings (at most 14 months).

8. Your rights (Arts. 15-22)

• Access to your personal data (Art. 15).
• Rectification of inaccurate data (Art. 16).
• Erasure (Art. 17).
• Restriction of processing (Art. 18).
• Data portability (Art. 20).
• Objection to processing based on legitimate interests (Art. 21).
• Withdrawal of consent at any time, for processing based on consent (Art. 7(3)).
• Not being subject to a decision based solely on automated processing that significantly affects you (Art. 22).

9. How to exercise your rights

Send your request to [email protected]. We will respond within one month, as required by the GDPR.

10. Complaints

You have the right to lodge a complaint with the data protection supervisory authority in the EU or EEA member state where you live or work, or where an alleged infringement took place.