Privacy Policy

Privacy Policy

Data controller: LL BERK YAZILIM TEKNOLOJİLERİ ANONİM ŞİRKETİ (LL Berk Software Technologies Inc.), Altıntaş Mah. Aydınlar 5 Sk. No:9 İç Kapı No:3, Dalaman / Muğla, Turkey, info@berk-tech.com. This policy covers berk-tech.com, Berk Studio and its licensing, trial and telemetry services. It is written to meet Turkish data-protection law (KVKK) and, for customers in the EU/UK, the GDPR.

1. What we process and why

Orders and invoicing: name, e-mail, address, company and tax ID — to perform the contract and meet accounting obligations (retained 10 years under Turkish tax law). Card details are entered on Paddle's checkout and never reach us; Paddle is the merchant of record and processes payment data under its own privacy policy.

Licensing: a hash of the license key, your device's public key, an anonymous machine binding, software version and OS, activation/heartbeat times and IP address — to verify the license, manage seats and prevent abuse (contract performance, legitimate interest). Personal files, project contents and source code are never sent.

Trial: anonymous machine binding and device public key — to track the trial period. Not linked to identity data.

Telemetry (opt-in): enumerated usage events and crash signatures (module/method names; no file paths or content), a random installation ID — product improvement. Basis: consent; switch off any time under Help → Privacy, where you can also view and delete your data. Raw events are kept 90 days.

Feedback: your message, optional contact address (stored encrypted, deleted after 180 days) and content-free diagnostics — to resolve the issue and reply.

Education applications: role, name, academic e-mail, institution, and an eligibility document (enrolment certificate or staff ID) — processed only to decide eligibility; the document is deleted within 30 days of the decision, keeping only the decision record. Institutional lists (names and e-mails) are kept for the license term for key mapping.

No Barriers applications: name, e-mail, country, an optional purpose (fixed choices), whether a parent or guardian applied, the document type and an official document showing disability status (disability ID card, medical board report, etc.) — processed only to check eligibility, create and e-mail the license, and apply the one-license-per-person rule. Because the document may contain health data it is special-category data; the legal basis is your explicit consent (KVKK art. 6; GDPR art. 9(2)(a)). The form does not ask for a type of disability or a diagnosis, and applicants are told they may cover diagnosis details. The document goes straight to our license server in Turkey (no third-party form service), is stored AES-256 encrypted, opened only for review and deleted as soon as a decision is made, or at the latest within 30 days; only the decision record (date, outcome) is kept. Participation does not appear in the license name or key and is not added to our customer records. For applications through an organisation, the organisation confirms eligibility and sends us only names, e-mail addresses, countries and languages. The application record is kept for the license term plus 3 years; it is deleted if you withdraw consent.

Website: contact and order forms are relayed to our mailbox by FormSubmit; we use no advertising or tracking cookies.

Site measurement: we count which pages are viewed, how long a page stays open, which site a visit came from (domain only), the browser language and the number of downloads — as aggregate counters only. This measurement uses no cookies and stores no IP address, browser identifier or anything that identifies a person (the IP address is used only momentarily by the rate limiter that prevents abuse and is not recorded). If "Do Not Track" or "Global Privacy Control" is enabled in your browser, no measurement signal is sent. Counters are kept as daily totals on our license server in Turkey.

2. Sharing and transfers

Data is shared only as needed with the payment partner (Paddle), our e-mail provider and, where the law requires, authorities. License and telemetry servers are hosted in Turkey. For customers in the EU/UK this means a transfer outside the EEA/UK, made on the basis of contract necessity and, for telemetry, your consent.

3. Retention

Invoicing records as long as the law requires; license records for the subscription plus 3 years; telemetry 90 days; feedback contact 180 days; trial records (anonymous) for the product lifetime.

4. Your rights

You may request access, correction, deletion, restriction, portability and object to processing, and withdraw consent at any time. Write to info@berk-tech.com; we answer within 30 days. Telemetry data can be viewed and deleted instantly inside Berk Studio. EU/UK residents may also complain to their supervisory authority.

5. Security

License tickets are signed server-side, contact details are stored encrypted, secrets are kept in the server environment, and access is limited to authorised staff.

6. Changes

Updates are published on this page; material changes are notified to subscribers by e-mail.