Privacy Policy

Privacy Policy

Effective Date: January 1, 2025  |  Last Updated: April 1, 2025

This Privacy Policy explains how jekcms, a product of ALFA Dizayn ("we", "us", or "our"), collects, uses, and protects the information you provide when using our website and services located at jekcms.com.

1. Information We Collect

We collect information you voluntarily provide, as well as data generated automatically during your use of our services:

• Account Information: Name, email address, company name, and billing details provided during registration or purchase.
• Usage Data: Pages visited, features used, session duration, browser type, IP address, and referring URLs.
• Payment Information: We use third-party payment processors (e.g., Stripe, iyzico). We do not store full card numbers on our servers.
• Support Communications: Messages and attachments you send us via support tickets or email.
• Cookies and Tracking: See our Cookie Policy for full details.

2. How We Use Your Information

We use collected data to:

• Create and manage your account and license
• Process payments and issue invoices
• Send transactional emails (license keys, receipts, renewal reminders)
• Provide technical support and respond to inquiries
• Improve our product and detect bugs
• Send product updates and newsletters (opt-out available at any time)
• Comply with legal obligations

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data based on:

• Contract performance — processing necessary to deliver the service you purchased
• Legitimate interests — fraud prevention, security, and product improvement
• Consent — for marketing emails and optional cookies
• Legal obligation — tax records, invoice retention

4. Data Sharing

We do not sell your personal data. We may share it with:

• Payment processors (Stripe, iyzico) — for billing
• Email providers (SMTP relay services) — for transactional emails
• Hosting providers — our servers are hosted with reputable cloud providers
• Legal authorities — when required by law or court order

5. Data Retention

We retain your data for as long as your account is active. After account closure, we keep purchase records for 10 years as required by Turkish tax law. Usage logs are purged after 12 months. You may request deletion of non-legally-required data at any time.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Withdraw consent at any time
• Object to or restrict processing
• Data portability (receive your data in a structured format)
• Lodge a complaint with a supervisory authority

To exercise your rights, email us at privacy@jekcms.com.

7. Security

We implement industry-standard security measures including TLS encryption in transit, hashed passwords, rate limiting, CSRF protection, and regular security audits. However, no system is 100% secure and we cannot guarantee absolute security.

8. Children's Privacy

Our services are not directed at children under 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or a banner on our website. Continued use after changes constitutes acceptance.

10. Contact

ALFA Dizayn  |  Email: privacy@jekcms.com

Google API Services

Some jekcms features (the Google Console module) let a site owner connect their own Google account to view their Search Console, Google Analytics and AdSense data inside their own admin panel. The connection is established through Google's OAuth 2.0 flow via our authorization relay at jekcms.com.

• We request read-only reporting scopes only (Search Console, Google Analytics, AdSense). jekcms does not request any scope that can modify your Google account or its data.
• Access and refresh tokens are delivered to the connecting site through an encrypted, one-time, server-to-server exchange. jekcms.com does not store your Google tokens and does not read or store any of your Google data.
• All Google data is retrieved by, and displayed only on, the site owner's own installation. After the connection is established, no report data passes through jekcms.com; token refresh requests contain no user data.
• You can revoke access at any time from your site's admin panel ("Disconnect") or from your Google account permissions page.

jekcms's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.