Privacy Agreement

1. Data controller

Your personal data is processed by KEP YAZILIM ÇÖZÜMLERİ LTD. ŞTİ. as data controller, for the purposes described below, under Turkish Personal Data Protection Law no. 6698 (“KVKK”).

This notice applies to the KepHomes website and mobile application.

2. Personal data we process

The data below is processed according to the nature of the service used. Not all data is requested from every user; only what the feature you use requires is collected.

• Identity and contact: first name, surname, telephone number, e-mail address, KEP identity number.
• Account and usage: role (landlord, tenant, service provider), city of registration, notification preferences, last seen time, application push token.
• Identity verification (only if verification is started): identity document type and number, date of birth, nationality, address, and uploaded document images.
• Financial (only if you are to receive payments): IBAN, account holder name, tax number and tax office.
• Transaction records: credit balance, credit movements and purchase records.
• Property and listing data: information and images for the properties and listings you upload.

3. Protection of sensitive data

National identity numbers and IBAN details are not held in the database in plain text; they are stored encrypted. Card details are never seen, processed or stored by us at any stage.

In system logs, identity numbers, telephone numbers and addresses are masked. All data transfer takes place over TLS-encrypted connections.

4. Purposes of processing

• Creating your account and verifying your sign-in.
• Operating property, tenancy, billing and service request processes.
• Completing Kep Credit purchases and managing your balance.
• Meeting statutory identity verification and listing verification obligations.
• Resolving your requests and complaints and providing support.
• Ensuring platform security and preventing misuse.

5. Legal grounds

Your data is processed on the grounds of the conclusion and performance of a contract (KVKK art. 5/2-c), compliance with a legal obligation (art. 5/2-ç), establishment and protection of a right (art. 5/2-e), and legitimate interest (art. 5/2-f).

Processing that does not rest on any of these grounds is carried out only with your explicit consent, which you may withdraw at any time.

6. With whom we share it

Your data is not sold or rented to third parties for marketing purposes. It is shared only to the extent the service requires, with the following parties:

• iyzico Ödeme Hizmetleri A.Ş. — to carry out payment transactions. Your card details are transmitted directly to iyzico.
• Our SMS service provider — to deliver verification codes and notification messages (telephone number).
• The Turkish Ministry of Trade EİDS system — only where a real estate listing is published, for statutory listing verification.
• Authorised public institutions — only upon a request arising from legislation and limited to the scope requested.

7. Visibility within the platform

Listings and marketplace records you publish are visible to everyone, including visitors who are not signed in. Only the information you entered is displayed in those records.

On public listings, the property location is shown as an approximate area rather than a full address. The full address is disclosed to the parties only once the relevant tenancy or service relationship is established.

8. Retention period

Your personal data is retained for as long as the purpose of processing requires and for the limitation periods prescribed by applicable legislation.

When you delete your account, your data is erased or anonymised; however, transaction records that tax legislation requires to be retained are kept for the statutory period.

9. Your rights

Under Article 11 of the KVKK you have the right to: learn whether your personal data is processed; request information about it; learn the purpose of processing and whether it is used in line with that purpose; know the third parties to whom it is transferred, in Türkiye or abroad; request correction where it is incomplete or inaccurate; request its erasure or destruction; request that such actions be notified to the third parties to whom the data was transferred; object to an adverse outcome arising from analysis carried out exclusively by automated systems; and claim compensation for damage suffered due to unlawful processing.

You may send your requests to info@keporganization.com. Applications are concluded within 30 days at the latest.

10. Cookies

The site uses only strictly necessary cookies, which keep your session open and remember your language preference. Signing in is not possible without them.

No third-party tracking cookies are used for advertising or profiling.

11. Changes

This notice may be updated in line with changes to our services or to legislation. The current version is always published on this page, with its effective date shown at the top.