Privacy

This policy explains what personal data Mefolio collects, why, and what you can do about it. The data controller is Nitec Group Turizm Sanayi ve Ticaret Ltd. Şti., Uncalı Mah. Toroslar Cad. İncedağ Konutları G Blok No:72/F, 07050 Konyaaltı / Antalya, Türkiye (Antalya Kurumlar V.D. 6311446081). Contact: info@mefolio.co. A Turkish notice under Law No. 6698 (KVKK) is here.

1. What we collect

We do not use advertising or analytics trackers, and we do not sell personal data. Measurements and photos are shown only on pages you choose to publish.

2. Legal bases

• Contract — running your account and the features you use (GDPR art. 6(1)(b); KVKK art. 5/2-c).
• Legitimate interests — security, preventing abuse, reviewing pages before they go public, telling you when your links are opened (GDPR 6(1)(f); KVKK 5/2-f).
• Legal obligation — invoices and accounting records (GDPR 6(1)(c); KVKK 5/2-ç).
• Your choice — making your page visible in search engines, and anything you publish. You can change this at any time in your panel.

3. Who sees your data

• The public sees only what you publish, and only through your link — unless you switch on search visibility.
• The Mefolio team sees what is needed to review pages, answer support requests and handle reports.
• Service providers who run the service for us under contract: Cloudflare, Inc. (hosting, database, photo storage, email delivery). Photos and the database are stored in the European Union.
• Authorities, when the law requires it.

Some providers are based outside Türkiye and the European Economic Area. Such transfers rely on the safeguards the law requires, such as standard contractual clauses.

4. How long we keep it

• Account, profile, photos, links, messages and view records — while your account exists. When you delete your account they are removed; backup copies expire within 30 days.
• Login codes expire after 10 minutes; sessions after 30 days.
• Payment and invoice records — as long as tax and commercial law requires.

5. Your rights

You can see, correct and delete your data in your panel at any time. You can also ask us to give you a copy, restrict or object to processing, or move your data elsewhere. Write to info@mefolio.co; we answer within 30 days. You may complain to your data protection authority — in Türkiye, the Personal Data Protection Authority (KVKK); in the EU, the authority of your country.

6. Cookies

We use only cookies that are needed for the service to work — see the cookie policy.

7. Security

Connections are encrypted. Login codes and session tokens are stored only as hashes. Delivery galleries and selection links can be protected with passwords and expiry dates. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

8. Changes

We will post updates here and tell you by email or in your panel if a change is significant.