Legal
What data we process, why, and who we share it with
Effective: September 1, 2026
This English text is provided for convenience. The Turkish version is the binding text; in case of any inconsistency, the Turkish version prevails.
This summary is for convenience only; the full text is what applies.
This policy covers personal data processed in the Upvera mobile application, the websites under upvera.co, and connected services. The data controller is the business identified in the Terms of Use: Upvera — Tuna Akgün (sole proprietorship), İstanbul, Türkiye, destek@upvera.co.
For users in Türkiye, Law No. 6698 on the Protection of Personal Data (“KVKK”) applies; see the KVKK Disclosure for the detailed statutory notice. The laws of your country may grant you additional rights; you can use the same contact channel to exercise them.
We process only the data needed to run the product:
What we do not collect today: location data, contacts, health data, advertising identifiers. The mobile app does not use cookies; web surfaces may use strictly necessary cookies for session management only — no advertising or tracking cookies.
We do not sell personal data. Your data is shared only with the providers required to run the service, and only as much as needed:
Data may also be shared with competent authorities where we are legally required to, and, in the event of a business transfer, with the acquirer under the same protection obligations.
Content sent to AI providers is used only to run the relevant feature; we do not permit these providers to use it to train their own models. Where the service requires it, other processors of a similar nature may be engaged; this policy is updated for any material change.
Upvera does not display advertising today and does not process your personal data for advertising purposes. If advertising or sponsored content is introduced in the future: ads will be labeled in a distinguishable way, this policy will be updated before it takes effect, and any processing of personal data for that purpose will be subject to your explicit consent where required by law. Even then, your personal data is not sold.
Your profile, posts, startup pages and the general indicators on Ranks are public; they can be seen by people who are not signed in and by search engines.
Your messages are visible only to the participants of the conversation. Your notes, wallet balance, interest profile and Envy conversations are visible only to you.
We keep your data for as long as your account stays open. When you delete a piece of content, the related record is removed and cleared from backups within a reasonable period.
When you delete your account, your profile, content, messages, wallet, signals and interest profile are permanently deleted. Transaction records that must be kept for the integrity of the platform economy (amounts, timestamps) are anonymized by severing their link to you — who you are can no longer be read from them. Security and traffic logs may be retained for the periods required by applicable law.
You can start deletion yourself, without waiting: Settings → Delete account.
Data is encrypted in transit. Database access is restricted with row-level security policies: one user cannot access another’s data. Server-side keys are never sent to the app. We recommend enabling two-factor authentication for your account (Settings → Security).
No system is absolutely secure. If a breach affecting your personal data occurs, we notify you and the competent authority within the period required by applicable law.
The servers of the providers we use may be located outside Türkiye. Such transfers are carried out within the framework of Article 9 of the KVKK (adequacy decisions, appropriate safeguards or the exceptions provided in that article) and only to the extent the service requires. Which provider receives which data is listed openly in Section 5.
Upvera is not intended for children under 13; when we learn that an account or data belongs to a child under 13, we delete it.
You have the rights listed in Article 11 of the KVKK, including accessing your data, requesting correction or deletion, and objecting to processing; the full list and the application procedure are in the KVKK Disclosure. You can send requests to destek@upvera.co; to verify your identity, you may be asked to apply from the e-mail address registered to your account. Applications are answered within thirty days at the latest.
We may update this policy; material changes are announced in the app and the effective date is updated.
Questions and data requests: destek@upvera.co