Privacy Policy

1. Who we are

This Privacy Policy is issued by Hüsnüye Yaşar HY AI Platform ("HY AI Platform" or "HY"), a sole proprietorship registered in Türkiye, for the hyaiplatform.com website and the HY AI Platform service. Last updated: 25 September 2026.

• Controller: Hüsnüye Yaşar HY AI Platform
• Turkish tax ID: 9390389782
• Address: Çınarlı Mah. 1572 Sk. Kapı No:33 Daire No:Z18 Konak/İzmir, Türkiye
• Email: privacy@hyaiplatform.com

2. Our two roles

HY processes personal data in two capacities:

• As controller: for website visitors, people who contact us or request a demo, and the authorised users of businesses that use HY.
• As processor: for the customers of the businesses that use HY. Each business is the controller of its own customers’ data; HY processes that data only on the business’s instructions and to provide the service.

3. Data we process

Depending on the service, we may process:

• Contact and demo requests: name, company, email, phone and the content of the request
• Business users: name, email, role and permissions, sign-in and activity records
• Data about businesses’ customers: name, phone number or messaging-platform user ID, message content and attachments, order, delivery, payment and invoice details
• Technical data: IP address, browser and device details, security and error logs

4. Data from Meta platforms (WhatsApp, Instagram, Messenger)

When a business connects its WhatsApp Business Platform, Instagram or Facebook Messenger account to HY, HY receives the messages sent to and from that account. This includes the sender’s display name, phone number or platform user ID, message content, attachments and timestamps.

• We use this data only so the business can view and answer its customers’ messages, so the AI sales agent can reply using the business’s own product, price and stock data, and so an order can be created after the customer confirms.
• We do not sell this data, use it for advertising or profiling, or share it with third parties for marketing.
• Data received from Meta platforms is processed in line with the Meta Platform Terms and related policies.
• A business can remove the connection at any time from the Connections screen in HY; after that, HY receives no new messages from that account.

5. Purposes and lawful bases

We process personal data to provide the service and perform our contract with the business (contract), to answer enquiries and keep the service secure (legitimate interests), to meet legal and tax obligations (legal obligation), and, where required, with consent — for example optional marketing emails.

6. Service providers and international transfers

We use the following kinds of service providers. Some of them process data outside the UK and Türkiye; where data leaves the UK we rely on appropriate safeguards such as the UK International Data Transfer Addendum or adequacy regulations.

• Application hosting and database: Railway, Supabase
• Website hosting: Vercel
• AI: OpenAI (to suggest and generate replies to messages)
• Messaging: Meta (WhatsApp, Instagram, Messenger)
• Email: Cloudflare, Google
• Integrations a business chooses to enable, such as marketplaces

7. Retention and deletion

We keep personal data only as long as needed for the purpose it was collected for and for any legally required period. When the purpose ends or a business’s subscription ends, data is deleted or anonymised, except records we must keep by law, such as invoices.

How to ask for deletion is explained on our Data Deletion Instructions page (hyaiplatform.com/legal/veri-silme?lang=en).

8. Security

Each business’s data is kept separate; access requires authentication and is limited by roles and permissions; traffic is encrypted with HTTPS; and critical operations are logged.

9. Your rights

Under UK data protection law you have the right to access, correct and delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. We reply within one month.

• Email: privacy@hyaiplatform.com
• Post: Çınarlı Mah. 1572 Sk. Kapı No:33 Daire No:Z18 Konak/İzmir, Türkiye

If you are a customer of a business that uses HY, that business is the controller of your data, so please contact it first; requests that reach us are passed on to it. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk).

10. Changes

We may update this policy when the service or the law changes. The current version is always published on this page.