Privacy Policy

1. Data Controller

Pazarus Yazılım Anonim Şirketi
Web: pazarus.io
Email: [email protected]

2. Data We Collect

• Account information: Name, email, company name, phone number
• Marketplace credentials: API keys/tokens you provide for marketplace connections (stored encrypted)
• Product and order data: Product, stock, price, and order information that flows from your marketplaces or WooCommerce store
• Usage data: IP address, browser, device, login times, log entries
• Payment information: Processed by iyzico (we do not store card numbers)

3. Purpose of Processing

• Service delivery: marketplace synchronization, order management, invoicing
• Account security and login verification
• Billing and subscription management
• Customer support and technical communication
• Service improvement and analytics (with anonymized data)

4. WooCommerce Plugin Integration

When you install the Pazarus Pazaryeri Entegrasyonu for WooCommerce plugin, the following data is transmitted from your WordPress site to Pazarus.io:

• On connection: Your WordPress site URL (to obtain an API key)
• On webhook registration: Your WordPress REST API URL
• On feed/sync operations: Product data (name, SKU, price, stock, barcode, images) — only when triggered by you

Data is sent only when you explicitly trigger an action. No background tracking or telemetry is performed.

4a. AI Connector (Claude, ChatGPT, Gemini)

The Pazarus AI Connector lets an AI application of your choice (for example Claude.ai, ChatGPT or Gemini Enterprise) access your store data only with your explicit consent. The connection is initiated from the AI application; you sign in with your Pazarus account, choose which store may be accessed and approve the connection.

• What data: Sales and order summaries, return requests, stock and product information, customer questions, profit and loss summaries, marketplace connection status and listing logs — limited to what your panel permissions allow you to see.
• Personal data protection: Customer names are masked to an initial; phone numbers, e-mail addresses, postal addresses, national ID numbers and IBANs are never transmitted to the AI application and are automatically redacted from free-text fields.
• Who receives it: Data is transmitted only to the AI application you connected and only to answer your request. Processing by the AI provider (OpenAI, Anthropic, Google) is governed by that provider's own privacy policy. Pazarus does not share or sell this data with any other third party.
• Read-only: The connection cannot modify your store data; it cannot change stock, prices or orders.
• Retention: Pazarus does not keep copies of the answers sent to the AI application. Which application performed which query is recorded in your store activity log. Access credentials are stored encrypted; access tokens expire after 1 hour and refresh tokens after 30 days.
• Control: You can disconnect at any time from the panel (Integrations → AI Connectors); connections are automatically invalidated when your account is closed.

5. Third-Party Sharing

We share data only with the following third-party service providers required for service delivery:

• Marketplaces (Trendyol, Hepsiburada, N11, Amazon, etc.) — for product/order sync
• Cargo carriers — for shipment label generation
• E-invoice providers (Sovos, QNB Finansbank, GİB) — for invoice issuance
• iyzico — for payment processing
• OpenAI/Anthropic — for AI features (anonymized when possible)

Data is not sold to third parties under any circumstances.

6. Data Retention

Your data is retained as long as your account is active. After account deletion, your data is permanently removed within 90 days. Some data (invoices, accounting records) may be retained longer due to legal obligations.

7. Your Rights

Under applicable data protection laws (including KVKK and GDPR), you have the right to:

• Request information about your data and request copies
• Correct inaccurate or incomplete data
• Request deletion of your data (right to be forgotten)
• Object to or restrict data processing
• Request data portability

To exercise these rights, contact: [email protected]

8. Cookies

We use essential cookies for session management. We do not use third-party tracking cookies. Analytics tools (if any) collect only anonymous data.

9. Security

Data is protected with industry-standard security measures: HTTPS encryption, encrypted database storage of credentials, regular backups, and access controls. Despite our efforts, the internet is never 100% secure—please use a strong password.

10. Changes

This policy may be updated as needed. Material changes will be notified via email or platform notification.

11. Contact

For privacy questions: [email protected]