Skip to content
DigitiumGet a quote

Privacy policy

Last updated:

This policy explains how your personal data is processed when you use the Digitium website, admin panel and mobile app. The service is provided by VECTA OTOMOTİV DİJİTAL PAZARLAMA LİMİTED ŞİRKETİ (“we”).

This is an English translation provided for convenience. If it differs from the Turkish version, the Turkish version prevails.

Who is the data controller?

The service involves two separate roles:

  • For this website and quote requests, we are the data controller.
  • In the mobile app and admin panel, the institution using the service (a prep school, preschool, music and art school, course or study centre) is the data controller for its student, parent and teacher data. We act as a “data processor”: we process that data on the institution's instructions and only to provide the service.

For requests about data your institution keeps, please contact your institution first. If such a request reaches us, we forward it to the institution.

This website

This website uses no cookies or similar tracking technologies. There are no ads, social media plugins, embedded video services or third-party analytics. Fonts and images are served from the site's own server. Switching languages is a plain link and sets no cookie.

The website is hosted by US-based Render on servers in its Frankfurt (Germany) region. The hosting infrastructure keeps logs (IP address, browser details, requested page and time) for security and operations; these logs are deleted after 7 days.

Questions typed into the site's “Ask a question” tool are passed to an AI provider (Groq, USA; Cloudflare as backup) to generate the answer. The conversation is not written to a database, disappears when the page closes, and visitors are asked not to write personal details; phone numbers, email addresses and long numbers are removed before sending. To prevent abuse, the IP address stays in server memory only, for at most 24 hours, and is not recorded.

If we ever add a cookie-free visitor statistics tool, we will update this policy beforehand.

Quote form

When you submit the form, we process your full name, institution name and type, phone number, student count range, and your optional email and message. This is not stored in a database: it reaches our team as an email through our email provider Resend (Plus Five Five, Inc., USA).

We use this to respond to your request, contact you by phone or WhatsApp and prepare a quote; we do not use it for promotional messages. To prevent abuse of the form, your IP address is held in server memory for at most 10 minutes and is not saved. See the KVKK privacy notice for details.

Data processed in the app (on behalf of institutions)

  • Account: full name, phone number, role and institution membership. Passwords are never stored, only a one-way hash.
  • Student record: full name, grade, optional birth year and month and the link to parents.
  • Education records: timetable, attendance, progress notes and exam results.
  • Payment records: charges, payments and receipts. The app never asks for card details.
  • Communication: announcements and their attachments, messages and read receipts, notifications.
  • Teachers: pay model, earnings and payments made to the teacher.
  • Device: the device's push token and platform (iOS or Android), used to send notifications.
  • Error reports: technical details when the app fails. Personal data is stripped before sending.
  • Activity log: who changed which financial or membership record or attendance entry, and when.

We do not ask for national ID numbers (TC kimlik), location, contacts or advertising IDs. The app has no ads and no third-party analytics. Please do not enter special categories of data, such as health information, in note fields.

Where data is stored and who we share it with

We provide the service with the following providers. Each processes data only to provide its own service.

  • This website: Render (US-based; server region Frankfurt, Germany).
  • Site question tool: Groq (USA) or Cloudflare. Only the text of the question is passed on.
  • Quote form notifications: Resend (Plus Five Five, Inc., USA). Form details and the notification email reach our team's mailbox through this provider.
  • Institution data (database, authentication and files): Supabase (US-based; server region Frankfurt, Germany).
  • Admin panel: Render (US-based; server region Frankfurt, Germany).
  • SMS: Netgsm (Türkiye). Phone number and message text are passed on.
  • Online payments: iyzico (Türkiye). Card details are entered directly on iyzico's payment page and never reach the institution or us.
  • WhatsApp: institution staff send messages from their own WhatsApp account; the panel only opens the ready-written text in the staff member's WhatsApp. No data is passed to Meta through us on this route.
  • AI: if the institution enables the assistant, through Groq (USA) or Cloudflare; names, phone numbers and the institution's name are not sent.
  • Notifications: delivered through Apple on iPhone and Google (Firebase Cloud Messaging) on Android. Only the device push token and a generic notification are sent; never a student's name, an amount or message text.

Because Supabase, Render, Resend, Apple, Google, the AI providers of the site question tool and, if the institution enables the assistant, its AI providers are outside Türkiye, the data described above is transferred abroad.

Apart from this, we share data only when legally required by authorised public bodies. We never sell data.

How long data is kept

  • Notifications are deleted automatically after 90 days, notification delivery records after 2 days.
  • Quote requests: not stored in a database. The notification email stays in our team's mailbox for at most 1 year from the request; the email provider's message record is deleted after 30 days.
  • Institution data: for as long as the contract with the institution lasts. When it ends, the data is handed over to the institution on request as CSV or PDF, and deleted once the institution confirms the hand-over or at the latest 60 days after the contract ends, except for records that must be kept by law.
  • Payment and receipt records: kept by the institution for its statutory retention period and as long as needed for possible disputes (default: 10 years from the year after the record), and not used for any other purpose; they are not deleted when an account is deleted, and “Deleted user” is shown instead of the person's name. The institution, as data controller, sets the retention period for attendance, lesson, exam and message records.

Account and data deletion

You can request deletion of your mobile app account from within the app or by writing to us. The support page explains what is deleted and what is kept.

Security

All connections are encrypted (HTTPS). Each institution sees only its own data, and access is checked in the database on every request. Within an institution, people see only what their role requires: parents see only their own children's information, and teachers cannot see a student's balance. Financial and membership changes are recorded in an activity log.

Children's data

Most students are under 18. Student accounts are optional and are created by the institution; a parent's account shows their children's information. The app has no ads and no third-party analytics.

Your rights

Your rights under Article 11 of the KVKK and how to exercise them are described in the KVKK privacy notice. Requests about data held by your institution go to the institution; requests about this website and quote requests come to us.

Changes

When we change this policy, we update the date on this page. We also inform institutions about significant changes.

Contact

  • VECTA OTOMOTİV DİJİTAL PAZARLAMA LİMİTED ŞİRKETİ
  • Address: Dumlupınar Mah. Şehit Turgut Çiçek Cad. Altek Plaza A Blok Kapı No:1A Daire No:26 Kartepe / Kocaeli
  • MERSIS no.: 0627106002400001