Privacy Policy

This policy summarizes what personal data we collect (account, content, technical and payment data) for visitors, members and artist/label accounts using Auvidi services; why we process it (service delivery, security, compliance, support and marketing with consent); retention periods and your rights under KVKK. It explains how to exercise access/rectification/erasure, restriction and objection; domestic/cross-border transfer principles and security measures in one place.

KVKK Compliant 5651 Traffic Logs Encryption & Access Control

Summary

Data Controller
Auvidi Bilişim ve Müzik Teknolojileri A.Ş
Address
Kavakpınar Mah. İhsan Sok. No:18 D:7 Pendik/İstanbul
Effective Date
10.10.2025

Scope and definitions

This policy covers the website/panel, API and support channels on auvidi.com and related subdomains. “Personal data” means any information relating to an identified or identifiable natural person. “Processing” includes collection, recording, storage, preservation, alteration, rearrangement, disclosure, transfer, acquisition, making available, classification or blocking use. Auvidi is the data controller; service providers (hosting/payment/email etc.) act as processors within contract scope and purpose. Special categories of data are generally not processed; where law requires, limited processing with safeguards and explicit consent may apply.

VisitorsMembersArtists/LabelsProspective users

Data we collect

  • Account data: Name/title, email, phone, billing details, contract and identity verification records.
  • Content data: Tracks/ISRC/UPC, artist name, cover art, metadata.
  • Technical data: IP, device/client info, cookies, session/transaction logs.
  • Payment data: Transaction tokens via payment provider (card data is not stored at Auvidi).
Payment data is processed via PCI DSS-compliant third-party providers.

Processing purposes and legal bases

  • Service delivery and contract performance (KVKK Art. 5/2‑c).
  • Legal compliance and obligations (KVKK Art. 5/2‑ç; tax law, 5651).
  • Fraud/abuse prevention and security (legitimate interest; KVKK Art. 5/2‑f).
  • Customer support and communication (contract/legitimate interest).
  • Marketing communications (only with explicit consent).

Retention periods

Account, transaction and traffic data are retained within applicable law and limitation periods. Deletion, destruction or anonymization procedures apply at end of period.

  • Customer/transaction records: [X] years
  • 5651 traffic data: at least [Y] years
  • Support tickets and emails: [Z] months/years

Sharing and transfer

Data may be shared with service providers (hosting, CDN, payment, email, analytics) and stores/partners as required for the service. Cross-border transfers use appropriate safeguards under KVKK Art. 9.

  • Data minimization and purpose limitation
  • Processor agreements and confidentiality commitments

Security measures

  • Encryption in transit and at rest
  • Access control and logging
  • Regular backups and integrity checks
  • Vulnerability/patch management
  • Two-factor authentication (2FA)
  • Least privilege and separation of duties
  • Regular penetration tests and vulnerability scans
  • Incident response plan and breach notification procedure

Your rights (KVKK Art. 11)

You may exercise the following rights:

  • Learn whether your data is processed
  • Request information on processed data and purposes
  • Request correction of incomplete/incorrect data
  • Request erasure/destruction/anonymization where conditions apply
  • Restriction and objection
  • Data portability (where applicable)

How to apply

Send requests to admin@auvidi.com with information suitable for identity verification. Applications are concluded as soon as possible and within 30 days at latest. Fees apply per KVKK and applicable tariffs.

For detailed notice and application form, visit our Personal Data Policy page.

Cookies

We use cookies to improve site performance and personalize experience. Essential cookies are required for the site to work; other categories can be managed via your preferences.

  • Essential, functional, analytics and marketing cookies
  • Retention: session and persistent cookies

See our Cookie Policy for details.

Cookie preferences

You can update your preferences at any time.

Cookie Settings

Policy updates and disputes

This policy may be updated; the revised text takes effect when published. Turkish law applies; courts in Istanbul (Pendik) have jurisdiction.