Privacy Policy and KVKK Notice
Last updated: 2026-10-22
Courtesy translation of a draft; the Turkish text prevails.
Seller
- Legal name
- Quicat Bilişim Limited Şirketi
- Tax office
- Zincirlikuyu
- Tax number
- 6321549491
- MERSIS
- to be published
- Address
- Esentepe Mah. Talat Paşa Cad. No: 5 İç Kapı No: 1, 34394 Şişli / İstanbul
- Phone
- +90 540 233 19 77
- E-mail (sales, support, invoices)
- destek@quicat.com
- Data-protection requests
- kvkk@quicat.com
- KEP
- Not yet — legal notices by e-mail
Courtesy translation; the Turkish text prevails. Issued by Quicat as data controller under article 10 of the Turkish Personal Data Protection Law (KVKK, no. 6698), for visitors of quicat.com and app.quicat.com and users of Brief and Dispatch.
1. Data, purposes, legal bases
| Data | Source | Purpose | Legal basis (KVKK art. 5) |
|---|---|---|---|
| Name, e-mail, Microsoft account and tenant ids | Microsoft sign-in | Console access, tenant boundary | Performance of a contract |
| Phone, Turkish ID / tax number, billing address | Basket page | Payment, invoicing, tax law | Contract; legal obligation |
| Order, payment id, acceptance time and IP | Console, iyzico | Matching payments, evidence in disputes | Contract; legitimate interest |
| Calendar data, Teams transcripts, generated notes, chat commands | Microsoft Graph, the Buyer’s tenant | Providing Brief | Contract |
| E-mail recipients, subject, body | Brief or the Buyer’s API call | Sending via Dispatch, send log | Contract |
| Access logs (IP, time, request) | Servers | Security, debugging | Legitimate interest |
Card data is never processed by Quicat; the payment page belongs to iyzico.
2. Meeting participants
Brief joins meetings of the organizers the Buyer designates; other participants’ speech is processed through the Microsoft Teams transcript. Informing participants is the organizing Buyer’s duty; Brief appears under its own name in the meeting chat and özetyok / nosummary disables the summary.
3. Transfers
Only as far as the Service requires: Amazon Web Services EMEA SARL (hosting, database, Amazon SES e-mail, Amazon Bedrock for note generation; Frankfurt, eu-central-1; Bedrock does not train on submitted data), Microsoft Ireland Operations Ltd. (the Buyer’s own Microsoft 365 tenant), iyzico Ödeme Hizmetleri A.Ş. (payments), Cloudflare, Inc. (DNS). Transfers abroad rest on the Buyer’s contractual consent and necessity for performance (KVKK art. 9).
4. Retention
Transcripts and notes: during the Service and 90 days after period end, earlier on request. Order, payment and invoice records: 10 years (Tax Procedure Law, Commercial Code). Acceptance records: contract term + 10 years. Access logs: 1 year.
5. Your rights
Under KVKK art. 11 you may learn whether your data is processed, request information, learn the purpose and the third parties it is transferred to, request correction, deletion or destruction and notification of these to third parties, object to a result produced solely by automated analysis, and claim compensation. Requests with identity verification go to kvkk@quicat.com (or the KEP address once one exists) and are answered within 30 days.
6. Security
TLS in transit, encryption at rest; each tenant’s data is reachable only by that tenant’s authorised users and Quicat’s assigned staff; cross-tenant access is technically prevented.
7. Cookies
See Cookie Policy.