Legal

Partner Privacy Notice

The purposes and legal grounds for which the personal data of people who apply to and join the Planfly partner program is processed, to whom it is transferred, how long it is kept, and their rights under KVKK.

Last updated: October 10, 2026

Contents · 7 sections

1. Data Controller
2. Data Processed, Purposes and Legal Grounds
3. Method of Collecting Data
4. Transfers
5. Information About Referred Businesses
6. Retention Period
7. Your Rights

This English version is a translation provided for convenience. If the English and Turkish versions conflict, the Turkish version prevails.

This notice has been prepared to inform people who apply to and join the Planfly partner program, pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (KVKK) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform (Aydınlatma Yükümlülüğünün Yerine Getirilmesinde Uyulacak Usul ve Esaslar Hakkında Tebliğ). Version: 2026-10-10.

1. Data Controller

Trade name: Mobiza Teknoloji
Address: Ovaakça Santral Mah. Ovaakça Fatih Sultan Mehmet Cad. No: 86, 16335 Osmangazi, Bursa, Türkiye
Tax office / number: Uludağ Tax Office / 1280527561
Email: legal@planfly.app
Phone: +90 850 307 90 23

2. Data Processed, Purposes and Legal Grounds

Data	Purpose	Legal ground (KVKK Art. 5/2)
Full name, trade name, phone, email, city, website / social media, promotion plan	Assessing the application, opening the account, communication	(c) Establishment and performance of the contract
Turkish national ID / tax identification number, tax office, address, tax and VAT status, age declaration	Issuing expense vouchers, e-documents and tax returns, responding to tax audits	(ç) Legal obligation (Tax Procedure Law (Vergi Usul Kanunu, VUK) No. 213, Art. 231, 234, 253; Income Tax Law (Gelir Vergisi Kanunu, GVK) No. 193, Art. 94, 98) and (c) contract
IBAN and account holder name	Paying commissions	(c) Performance of the contract
Commission, earnings, payout and document records (expense voucher, invoice, e-SMM, bank receipt)	Commission calculation, payouts, accounting records	(c) Contract and (ç) legal obligation
Partner code, referral link cookie, sign-up matching	Determining which partner a commission belongs to	(c) Performance of the contract
Login records, IP address, browser information, acceptance records (date, IP, version)	Account security, preventing fraudulent referrals, proving acceptances	(f) Legitimate interest and (e) establishment, exercise or protection of a right
Dispute and correspondence records	Protection of rights	(e) Establishment, exercise or protection of a right

Special categories of personal data (health, biometrics, religion, etc.) are not requested. No image of your ID card is requested. Your explicit consent is not required, and is not requested, for the processing described above.

3. Method of Collecting Data

Data is collected electronically through the application form, the partner dashboard, email and messages correspondence, the documents you upload, and automatic matching in sign-ups where your referral link or code is used.

4. Transfers

Your personal data may be transferred only for the purposes above, and to the extent necessary, to the following groups of recipients:

the Revenue Administration (Gelir İdaresi Başkanlığı) and authorized public institutions and organizations (e-documents, tax returns, legal requests),
banks and payment institutions (commission payouts),
the private e-document integrator and the certified public accountant (mali müşavir) (accounting and tax processes),
the messaging service provider (Netgsm İletişim ve Bilgi Teknolojileri A.Ş.) and email and hosting service providers (including Cloudflare).

The businesses you refer are shown the contact details you choose to publish in the dashboard (display name, trade name, phone, email, website). Your tax, identity, IBAN and commission information is not shared with businesses.

If hosting, email or infrastructure providers are located abroad, the transfer is made in accordance with KVKK Art. 9 and the related regulation, with appropriate safeguards such as an adequacy decision or standard contractual clauses.

5. Information About Referred Businesses

Your dashboard shows the names of the businesses you referred in masked form (e.g. "Ay*** Kua***"; fully anonymized if the business requests), their plan and subscription status, and commission amounts. This information is shared on the basis of Mobiza's legitimate interest (KVKK Art. 5/2-f) solely so that you can verify your commission. Keeping this information confidential and not using it for any other purpose is your obligation under the Partner Agreement.

6. Retention Period

Tax documents and accounting records are kept for at least 5 years from the beginning of the calendar year following the relevant year (VUK Art. 253), and commercial books and documents for 10 years (Turkish Commercial Code (Türk Ticaret Kanunu, TTK) No. 6102, Art. 82). Applications that are not finalized are kept for 2 years, and security logs for no more than 2 years. At the end of the period, the data is deleted, destroyed or anonymized.

7. Your Rights

Under KVKK Art. 11, you have the right to: learn whether your personal data is processed; request information about it; learn the purpose of the processing and whether the data is used in line with that purpose; know the third parties to whom it is transferred; request its correction if it is processed incompletely or incorrectly; request its deletion or destruction if the conditions in KVKK Art. 7 are met; request that these operations be notified to the third parties to whom it was transferred; object to an outcome against you resulting from analysis exclusively by automated systems; and claim compensation for damage caused by unlawful processing.

You can submit your requests in writing to legal@planfly.app or to Ovaakça Santral Mah. Ovaakça Fatih Sultan Mehmet Cad. No: 86, 16335 Osmangazi, Bursa, Türkiye. Requests are concluded within 30 days at the latest.