AltunakarDesk privacy notice

This translation is provided for information purposes only; the Turkish version is legally binding.

Last updated: 26 October 2026

1. Data controller

Company name: Altunakar Bilgisayar İnşaat Sanayi ve Ticaret Ltd. Şti.
Address: Aziziye Mahallesi Hava Sokak No: 30/A, Çankaya / ANKARA, Türkiye
MERSIS no.: 0067004649600013 · KEP: altunakarbilgisayar@hs01.kep.tr
Email: info@altunakar.net · Phone: +90 530 338 21 91

For Altunakar Bilgisayar's general privacy notice, see altunakar.net/gizlilik.

2. What data do we process?

From whom	Data
Every computer using the program	The computer's ID and device identifier, program version, operating system, computer name, the user name in the operating system, processor and memory information, and the time of the first and last connection to the server.
Connections established	Start and end time of the connection, the IDs of both computers, the name and IP address reported by the connecting side, the connection type (screen, file transfer), the names of transferred files and, if the person connecting is an Altunakar technician, the technician's name.
Personal account holders	Name, email address, an irreversible hash of the password, the time the account was created and last signed in to, the time of consent; and the computer IDs, names, notes, groups and connection password hashes you add to your address book (stored encrypted).
Users who send their logs	Program logs from the last 3 days that you send with the Send logs to Altunakar link in the program (connection, error and update events). These logs may contain the computer name, the AltunakarDesk ID, the program version, the operating system and connection details (including IP addresses); they contain no passwords or screenshots. Logs are received only when you send them.
Altunakar team accounts	Full name, user name, mobile phone number, password hash, authenticator app key, sign-in times and changes made in the team address book.
Subscription purchasers	Company name or full name, contact person, e-mail, phone, national ID or tax number, tax office and billing address; the licence key and the name, number and operating system of technician computers on which it is entered; payment records (amount, date, term, payment institution's transaction number). Card details never reach Altunakar and are not processed.
Trial requesters	Company or full name, e-mail, phone and the IP address of the request (to allow one trial per e-mail and prevent abuse).
Forms on the website	The IP address and time of submission (records of account creation, password resets and account actions; used for rate limits that prevent abuse).

3. Purposes and legal grounds

• Establishing connections and providing the service (device information, account and address book): necessary for the conclusion and performance of a contract (KVKK Art. 5(2)(c)).
• Security: keeping each ID bound to its computer, verifying Altunakar technicians, preventing failed sign-ins and abuse, and logging connections: the legitimate interest of the data controller (Art. 5(2)(f)) and legal obligations (Art. 5(2)(ç)).
• Resolving support requests and complaints, and evidence in potential disputes: the establishment, exercise or protection of a right (Art. 5(2)(e)).
• Password reset email: performance of a contract (Art. 5(2)(c)).
• Subscription, payment and invoicing; sending the licence key and expiry reminder e-mails: establishment and performance of the contract (Art. 5/2-c); legal obligation for invoice and accounting records (Art. 5/2-ç).
• Program logs you send: investigating and resolving the technical problem you report; performance of a contract (Art. 5(2)(c)). Sending logs is optional.

Your data is not used for marketing, sold, or shared for advertising.

4. Session content

Screen images, keyboard and mouse input, audio, clipboard content and files transferred during a remote session are end-to-end encrypted between the two computers. The Altunakar relay server cannot see this content and does not store it. If session recording is enabled, the recording is written only to the local disk of the computer concerned.

5. Who receives the data?

• Service providers: the program's traffic with our account server passes through the Cloudflare, Inc. network; installation files and updates are downloaded via GitHub, Inc.; password reset emails are sent via Google LLC (Gmail). These providers' servers may be located abroad; transfers are made in accordance with KVKK Art. 9 and the applicable legislation, to the extent necessary to provide the service.
• Notification service: instant notifications to our administrator (team account requests and submitted logs) are sent via the ntfy.sh service and contain only limited information such as a name, the AltunakarDesk ID, the device name and the file size. The content of the logs is not sent to this service.
• Payment institution: For card payments, name, e-mail, phone, ID/tax number, billing address and IP address are transferred to iyzico Ödeme ve Elektronik Para Hizmetleri A.Ş. to collect the payment and prevent fraud; card details are processed only on iyzico's secure page.
• Competent public authorities: upon request by authorities with legal power to do so.

The central server through which connections are established and the account server are located in Türkiye, in Altunakar's own office.

6. How long is data kept?

• Personal account and address book: until you delete your account. You can delete it at any time on the My account page; the account, sessions and address book are removed immediately.
• Connection and activity logs: kept for at most 12 months, then deleted automatically.
• Subscription records: for the duration of the subscription and 90 days after it ends; device records are then deleted. Invoice and payment records are kept for the periods required by tax law (up to 10 years).
• Unpaid purchase requests are closed after 48 hours; purchase request records are kept for at most 400 days.
• Device information: for as long as the program is used; deleted at your request.
• Program logs you send: stored on Altunakar's own server and deleted automatically after 30 days.
• IP information kept for rate limiting remains in the server's memory for no more than one hour.

7. Your rights

Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing, to know the recipients to whom it is transferred, to request rectification if it is incomplete or inaccurate, to request its erasure or destruction, to request that these actions be notified to the recipients, to object to an outcome against you resulting from analysis by automated systems, and to claim compensation for damage caused by unlawful processing.

You can submit requests in writing to the address above, to our registered electronic mail (KEP) address, or from your registered email address to info@altunakar.net. Your request will be handled free of charge within 30 days at the latest.