Privacy Policy
This policy explains how KABHAN TEKSTİL BİLİŞİM BİLGİSAYAR VE YAZILIM HİZMETLERİ SANAYİ TİCARET LİMİTED ŞİRKETİ ("KABHAN", "we"), operating the teambadger platform, collects and processes personal data when you visit teambadger.ai or use app.teambadger.ai (the "Service"). We act as the data controller for the data described here; for personal data contained in the websites and accounts our customers connect, we act as a processor on the customer's behalf.
1. Data we collect
- Account data — name, email, organisation, authentication handled by Clerk. We never see or store your password.
- Customer data — the website URLs you submit, crawl and audit results, competitor URLs, brand-profile content, and data from integrations you connect (e.g. GA4, Search Console, SEMrush). Integration tokens are stored encrypted at rest and access is read-only where offered as such; you can disconnect at any time.
- Usage & technical data — server logs (IP address, request metadata) kept for security and debugging.
- Analytics (consent-based) — on the marketing site we use Google Analytics 4 only after you accept analytics in the consent banner; until then it runs in cookieless, consent-denied mode (Google Consent Mode v2).
- Payment data — purchases are processed by Paddle as merchant of record; we do not receive or store card details.
2. Why we process it (legal bases)
- To provide and operate the Service — performance of a contract.
- Security, abuse prevention, and service improvement — legitimate interests.
- Marketing-site analytics — your consent (revocable).
- Legal, tax, and accounting obligations — legal obligation.
Processing is carried out under the EU/UK GDPR where applicable and the Turkish Personal Data Protection Law No. 6698 (KVKK).
3. AI processing & no-training guarantee
Audits and drafts are produced with large language models (currently Anthropic Claude; optional AI-visibility checks query OpenAI and Perplexity). Your data is sent to these providers only to produce your results, under agreements that prohibit using it to train their models. We do not use your data to train foundation models, and we do not sell personal data.
4. Subprocessors
| PROVIDER | PURPOSE | LOCATION |
|---|---|---|
| Clerk | Authentication & user management | US/EU |
| Neon | Postgres database | EU (AWS Frankfurt) |
| Google Cloud | Application hosting & logging | EU (europe-west3, Frankfurt) |
| Anthropic | AI processing (agents) | US/EU |
| OpenAI · Perplexity | AI-visibility checks (optional) | US |
| Firecrawl | Website crawling | US |
| Resend | Transactional email & digests | US/EU |
| Paddle | Payments (merchant of record) | UK/EU |
| Cloudflare | DNS & email routing | Global |
| Google Analytics 4 | Marketing-site analytics (consent only) | US/EU |
Application data (database, hosting) resides in the EU. Where a provider processes data outside the EU/Türkiye, transfers rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.
5. Cookies & local storage
- Strictly necessary: Clerk session cookies on app.teambadger.ai;
tb-theme(theme choice) andtb-consent(your consent decision) in localStorage on the marketing site. - Analytics (opt-in): GA4 cookies (
_ga,_ga_*) are set only after you accept analytics in the banner. You can change your mind by clearing site data for teambadger.ai.
6. Retention
Account and customer data are kept while your account is active and deleted or anonymised within a commercially reasonable period after account deletion (backups roll off on their own schedule). Server logs are retained for a limited period for security. Records we must keep for tax or legal reasons are retained for the statutory period.
7. Your rights
Subject to the GDPR and Articles 11 of the KVKK, you may request access to, correction, deletion, or export of your personal data, object to or restrict processing, and withdraw consent at any time. Write to hello@teambadger.ai; we respond within the statutory deadline (30 days under KVKK, one month under GDPR). You may also lodge a complaint with your local supervisory authority or the Turkish DPA (Kişisel Verileri Koruma Kurumu).
8. Security
Traffic is encrypted with TLS; integration tokens are encrypted at rest; access is scoped per organisation; infrastructure runs in access-controlled cloud environments. No method of transmission or storage is 100% secure, but we work to protect your data proportionately to its sensitivity.
9. Changes & contact
We will post any changes here and update the date above; material changes will be announced on the website or by email. Data controller: KABHAN TEKSTİL BİLİŞİM BİLGİSAYAR VE YAZILIM HİZMETLERİ SANAYİ TİCARET LİMİTED ŞİRKETİ, Türkiye · hello@teambadger.ai.