Privacy & Data Protection Notice

The Bansa brand is operated by True Yapım ve Medya A.Ş. (the “Company”, “Bansa”). As data controller under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), the Company processes your personal data lawfully, transparently and securely. This notice explains what data we process — across AI call answering, order/reservation management, WhatsApp notifications and payments — and on what legal grounds.

1. Data Controller

  • Entity: True Yapım ve Medya A.Ş. (operating the “Bansa” brand)
  • Address: Çağlayan Mah. Zuhal Sk. No:45B, Kağıthane / İstanbul, Türkiye
  • Registry (MERSİS) No: 0859119946100001 · Trade Registry No: 280936-5 · Tax Office/No: Kağıthane - 8591199461
  • Email: destek@bansa.tech · Web: bansa.tech

2. Personal Data Processed

  • Identity & contact: name, phone number, business name (if any)
  • Call data: voice recording, transcript and AI-generated call summary
  • Order/reservation data: delivery address, order contents, date-time, notes
  • Security data: IP address, device/browser info, timestamps, logs
  • Payment data: amount, transaction reference/result and — if you chose to save your card — the last four digits, card brand and iyzico storage token. Card details (PAN, CVV) are NEVER stored or seen by the Company (see Section 8)

3. AI Voice Assistant & Call Recordings

Incoming calls are answered by an AI assistant and may be recorded for service quality, accuracy and dispute resolution. Recordings are transcribed and summarized using automatic speech recognition and large language model (LLM) technologies, processed via workflow automation (n8n) and stored on cloud database infrastructure (Supabase). Data is processed solely to provide the service and is not sold to third parties for advertising.

4. Purposes

  • Answering calls and handling orders/reservations
  • Responding to requests and sending confirmation messages (WhatsApp/SMS)
  • Measuring and improving service quality
  • Payment and billing
  • Security, fraud and abuse prevention
  • Compliance with legal obligations

5. Legal Grounds

  • Necessity for the establishment/performance of a contract
  • Compliance with a legal obligation
  • Establishment, exercise or protection of a right
  • Legitimate interest, without harming fundamental rights
  • Your explicit consent where required (e.g. cross-border processing of recordings)

6. International Transfers

To deliver the service, some data (call recordings/transcripts, summaries, technical logs) may be processed via technology providers whose servers may be located abroad — e.g. AI call infrastructure (Retell AI), LLM providers and cloud database (Supabase). Such transfers are made under KVKK Art. 9, relying on your explicit consent or appropriate safeguards, limited to what the service requires.

7. Cookies

We may use strictly necessary and performance cookies for site operation, security and anonymous usage statistics. You can manage cookies via your browser; blocking essential cookies may affect functionality.

8. Payment Data, iyzico & Card Storage

Payments for credits and monthly plans are processed via iyzico (iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş.), a payment institution licensed under Turkish Law No. 6493. Your card details (number, expiry, CVV) are never seen, stored or recorded by the Company; they are handled directly by iyzico in line with PCI-DSS and secured via tokenization. The Company only sees the transaction result/reference.

If you tick “save my card” on the payment page, your card is stored at iyzico; the Company then keeps only the last four digits, the card brand (for display) and the storage token issued by iyzico. The stored card is used for monthly subscription auto-renewal and — if you enabled it — auto top-up charges. You are notified after every automatic charge and may request deletion of your stored card at any time via destek@bansa.tech; deletion stops automatic charges tied to it.

9. Retention & Security

Personal data is retained for periods required by law, reasonable service periods and limitation periods needed to protect rights; thereafter it is deleted, destroyed or anonymized per KVKK. Data is protected with access controls, encryption, authorization and logging.

10. Your Rights (KVKK Art. 11)

  • Learn whether your data is processed and request information
  • Learn the purpose and whether it is used accordingly
  • Know third parties to whom data is transferred (domestic/abroad)
  • Request correction, or deletion when conditions are met
  • Request notification of corrections/deletions to recipients
  • Object to adverse automated decisions and claim damages

11. How to Apply

To exercise your rights, contact destek@bansa.tech or the postal address above. Requests are answered within statutory periods.

Contact & Updates

For questions and requests, reach us via our contact page. This notice may be updated in line with legislation and service changes; the latest version is always published here.