Privacy Policy

ZEYPOS KVKK Disclosure Text and Privacy Policy

ZeyPOS is a cloud-based software platform that offers point of sale (POS), order management, stock tracking, accounts/ledger records, reporting, QR menu, WhatsApp order management, and artificial intelligence-supported assistant services for restaurants, cafes, hotels, beach clubs, and similar businesses.

ZeyPOS is developed and provided by Artech Yazılım Otomasyon Bilişim Sanayi ve Ticaret Limited Şirketi.

This text has been prepared to explain for what purposes your personal data are processed, with whom they may be shared, how long they may be stored, and your rights over your personal data within the scope of Law No. 6698 on the Protection of Personal Data.

1. Distinction Between Data Controller and Data Processor

Artech Yazılım Otomasyon Bilişim Sanayi ve Ticaret Limited Şirketi acts as the data controller in subscription, contract, payment, invoicing, technical support, communication, and customer relations processes related to businesses benefiting from ZeyPOS services.

For data relating to the personnel, customers, orders, checks, WhatsApp conversations, QR menu requests, and operational records of restaurants, cafes, hotels, and similar businesses using ZeyPOS, the relevant business is generally the data controller, while Artech Yazılım Otomasyon Bilişim Sanayi ve Ticaret Limited Şirketi acts as the data processor within the scope of the software services provided.

In this context, Artech processes the data entered into the system by the business or created through ZeyPOS by the business’s customers/personnel, within the framework of the relevant business’s instructions, the service agreement, technical requirements, and applicable legal regulations.

2. Data Controller Information

Title:
Artech Yazılım Otomasyon Bilişim Sanayi ve Ticaret Limited Şirketi

Address:
Şirintepe Mah. 8132 Sk. No: 20 /1 Çiğli / İzmir

E-mail:
info@artechotomasyon.com

Phone:
0534 658 89 96

3. Personal Data Processed

The following personal data may be processed while ZeyPOS services are being provided:

• Business and account information: Business name, authorized person information, tax and invoice information, contact information, branch information, subscription information, payment and collection records, support requests, and contract records.
• Personnel and user information: Name-surname, username, phone number, e-mail address, position/role information, user permissions, login/logout records, transaction history, shift and attendance records, order and check processing records, and location-based login/logout records where necessary.
• End customer and order information: Order contents, order amounts, payment type, check information, table/room number, phone number, WhatsApp number, message contents, delivery address or location, customer notes, and order history.
• Technical data: IP address, device information, browser information, operating system information, session records, system logs, error logs, performance records, security records, and cookie data.
• Financial and operational data: Sales records, cash register movements, payment types, current account records, stock movements, product and pricing records, reporting data, reconciliation records, and records related to internal approval/sign-off processes.

Mobile app permissions and device data

ZeyPOS mobile applications (waiter, kitchen, manager, etc.) may use the following device permissions for the purpose of carrying out their functions:

• Location: Location information is processed for staff check-in verification and delivery processes.
• Microphone: If the voice message/voice chat feature is used, the relevant audio recordings are processed solely for the purpose of transmitting the message.
• Camera: Camera access is used for QR code scanning (device pairing/login and menu); images are not stored and are used only momentarily for QR decoding purposes.
• Push notification ID: The device’s notification token information (Firebase Cloud Messaging) is processed so that order, call, and operational notifications can be sent.

4. Special Categories of Personal Data

As a rule, it is not intended to process special categories of personal data within the scope of ZeyPOS.

It is essential that users or businesses do not enter health information, biometric data, religion, sect, political views, criminal convictions, union membership, or similar special categories of personal data into the system.

Nevertheless, if special category data are entered into the system by the business, the relevant business is responsible for the processing of such data and for carrying out the necessary explicit consent/information processes.

5. Purposes of Personal Data Processing

Personal data may be processed for the following purposes:

• Providing ZeyPOS software services,
• Carrying out POS, order, stock, current account, cash register, accounting, and reporting processes,
• Managing QR menu and digital order processes,
• Responding to requests received via WhatsApp and similar messaging channels,
• Providing menu, pricing, order, and business information with the AI-supported assistant,
• Receiving, preparing, transmitting, and carrying out delivery processes for orders,
• Ensuring user authorization, session management, and access security,
• Enabling the business to manage personnel, shift, and attendance processes,
• Generating stock, sales, cash register, current account, and financial reports,
• Carrying out subscription, payment, invoicing, and customer support processes,
• Detecting technical errors, performance issues, security issues, and abuse,
• Improving service quality and developing the system,
• Fulfilling legal obligations,
• Responding to requests from authorized public institutions and organizations.

6. Methods of Collecting Personal Data

Personal data may be collected electronically through the ZeyPOS web panel, mobile applications, QR menu screens, POS and cash register screens, waiter, kitchen, bar and management panels, WhatsApp and similar messaging channels, e-mail, phone and support channels, payment, invoicing and subscription processes, cookies, log records, and technical systems.

7. Legal Grounds for Processing Personal Data

Personal data are processed based on the following legal grounds within the scope of Article 5 of the KVKK:

• Processing of data is necessary for the establishment or performance of a contract,
• Processing is mandatory for the data controller to fulfill its legal obligation,
• Processing is necessary for the establishment, exercise, or protection of a right,
• Processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,
• It is expressly provided for by law,
• Where necessary, the explicit consent of the data subject is obtained.

For processing activities requiring explicit consent, separate and clear approval is obtained. The disclosure text does not replace the explicit consent text.

8. WhatsApp and Messaging Assistant

ZeyPOS may help businesses respond to customer requests, receive orders, and communicate with customers via WhatsApp and similar messaging channels if preferred by the business.

Messages sent to the business’s WhatsApp line may be processed for the purposes of carrying out menu, pricing, reservation, order, delivery, room/table information, and customer service processes.

Message contents may be transmitted to business representatives, relevant personnel, or the AI-supported assistant depending on the nature of the request.

The WhatsApp messaging infrastructure is provided by Meta Platforms, Inc. Therefore, Meta/WhatsApp’s own terms of use and privacy policies may also apply in communications made via WhatsApp.

Address, location, room number, or similar information shared for delivery or service provision purposes is used solely for fulfilling the relevant request.

9. Use of Artificial Intelligence

ZeyPOS may provide AI-supported assistant services if preferred by businesses.

The AI assistant may be used for purposes such as providing menu and pricing information, taking orders, answering customer questions, providing operational support to business staff, interpreting reports, and similar functions.

In this context, message contents, order information, menu/pricing information determined by the business, and technical transaction records may be transferred to AI service providers for the purpose of generating responses.

Unnecessary personal data, special categories of personal data, identity documents, payment card information, health information, or similar sensitive information should not be entered into artificial intelligence systems.

10. International Data Transfer

Some technology providers used in the provision of ZeyPOS services may have their servers located abroad.

In this context, personal data may be transferred abroad, limited to AI service providers, messaging infrastructure providers, cloud server and hosting service providers, e-mail/SMS/communication infrastructure providers, and technical service providers.

International transfers are carried out within the framework of Article 9 of the KVKK, the relevant legislation, Board decisions, and where necessary, explicit consent, appropriate safeguards, standard contractual clauses, or other transfer mechanisms предусмотрed by legislation.

11. Parties to Whom Personal Data Are Transferred

Personal data may be shared, to the extent and for the purpose required by the service, with the following persons and organizations:

• the relevant business using ZeyPOS and its authorized users,
• personnel authorized by the business,
• cloud server and hosting service providers,
• messaging infrastructure providers such as WhatsApp/Meta,
• AI service providers,
• e-mail, SMS, and notification infrastructure providers,
• payment and invoicing service providers,
• accounting, e-invoicing, or integration service providers,
• technical support and maintenance service providers,
• legal advisors, certified public accountants, and auditors,
• authorized public institutions and organizations.

Personal data are not sold to third parties for purposes other than those stated above.

12. Retention Periods

Personal data are retained for the period required by the processing purpose and for the legal retention periods stipulated in the relevant legislation.

Data whose retention period has expired are deleted, destroyed, or anonymized.

In the event that the business account is terminated, data belonging to the business may be stored or deleted taking into account contractual obligations, technical requirements, backup processes, and the periods stipulated in the legislation.

Log, security, and transaction records may be retained for reasonable periods for the purposes of security, audit, troubleshooting, and resolution of legal disputes.

13. Data Security

Appropriate technical and administrative measures are taken to ensure the security of personal data.

In this context, the following may be applied:

• user authorization and role-based access control,
• company-based data isolation,
• secure session management,
• encrypted communication infrastructure,
• HTTPS usage,
• logging and transaction records,
• backup processes,
• server and application security measures,
• controls to prevent unauthorized access,
• error and performance monitoring systems

may be applied.

Our security approach: We process data only as much as necessary, restrict access, and apply the necessary controls to keep the system secure.

14. Cookies

The ZeyPOS web panel and website may use cookies for session management, security, user preferences, system performance, and, where necessary, analytics purposes.

• Necessary cookies: Required for the service to function.
• Analytics and performance cookies: May be used to improve user experience and measure system performance.

Cookie preferences can be managed through browser settings. If necessary cookies are disabled, some services may not function properly.

15. Rights of the Data Subject

Under Article 11 of the KVKK, data subjects have the following rights:

• to learn whether their personal data are processed,
• if their personal data have been processed, to request information regarding this,
• to learn the purpose of processing personal data and whether they are used in accordance with that purpose,
• to know the third parties to whom personal data are transferred domestically or abroad,
• to request correction if personal data are incomplete or incorrectly processed,
• to request deletion or destruction of personal data within the scope of the relevant legislation,
• to request that correction, deletion, or destruction operations be notified to third parties to whom the data have been transferred,
• to object to the emergence of a result to their detriment by analyzing processed data exclusively through automated systems,
• to claim compensation for damages in the event of loss due to unlawful processing of personal data.

16. Application and Contact

You may submit your applications under the KVKK through the following communication channels:

Artech Yazılım Otomasyon Bilişim Sanayi ve Ticaret Limited Şirketi

Address:
Şirintepe Mah. 8132 Sk. No: 20 /1 Çiğli / İzmir

E-mail:
info@artechotomasyon.com

Phone:
0534 658 89 96

Your applications will be concluded as soon as possible and within 30 days at the latest, depending on the nature of the request.

17. Policy Changes

This text may be updated from time to time due to legislative changes, updates made to ZeyPOS services, or changes in business processes.

The current text becomes effective from the date it is published on the ZeyPOS website or relevant platforms.

Last Updated: 20-06-2026

Contact Us Now