OPL-AI.com and OPL-AI Software Personal Data Protection Disclosure Statement

Last Updated: July 4, 2025

1. Data Controller and Data Processing Status Distinction

This Disclosure Statement has been prepared in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) and relevant legislation. OPL-AI Software (hereinafter referred to as "OPL-AI.com" or "Company") operates under two different data processing statuses:

  • a) Data Controller: The Company acts as the data controller only for membership registration data, invoicing information, and platform security (IP address) data.
  • b) Data Processor / Custodian: For the process and location data collected via OPL-AI Modules (Desktop and Mobile), the Company is solely in the position of providing **hosting and technical processing** services on behalf of the license holder **User**. The obligation to inform the relevant individuals (Sub-Users) and legal responsibility belong entirely to the **License Holder User, who is the primary Data Controller for this data.**

Data Controller Contact Information: OPL-AI Software İstanbul, Türkiye info@opl-ai.com

2. Personal Data We Process

We process the following personal data to provide our services, within the framework of the status distinction above:

  • (Company Data Controller Status) Identity, Contact, and Financial Information: Name, Surname, Email Address, Phone Number, Invoice Information.
  • (Company Data Controller Status) Transaction Security Information: IP address of the devices used during account registration, login, and invoicing.
  • (User Data Controller Status) Application Usage and Process Data:
    • Active Process Names and Titles (application/window names), Process Start/End Date and Time Information (Duration).
    • **Real-time Location (GPS) Data** collected via the Mapping Module with the consent of the licensed mobile device user.
    • Project, Location, and Company information selected by the User through the OPL-AI interface.
    • License Key Information.

Important Note Regarding User-Controlled Data: OPL-AI software **does not collect screen captures, audio recordings, or sensitive personal data** (e.g., health, religious beliefs). All liability for the lawful collection, use, and informing of Sub-Users regarding data collected by OPL-AI modules belongs **exclusively to the License Holder User (Main User).**

3. Methods and Legal Grounds for Collecting Personal Data

We collect your personal data through the following methods and based on these legal grounds:

  • (Data Controller Status) Direct Data Provided by You Electronically: Through membership registration and invoicing forms on the OPL-AI.com website. Legal Ground: KVKK Art. 5/2-c (conclusion or performance of a contract).
  • (Data Processor Status) Automatically Collected Data via OPL-AI Software: Collected from OPL-AI Modules with the user's initiative. Legal Ground: This data is processed by the Company for storage and reporting purposes based on KVKK Art. 5/2-c and Art. 5/2-f.
  • (Data Controller Status) Automated Methods: Collection of IP address data for platform functionality and security. Legal Ground: KVKK Art. 5/2-ç and Art. 5/2-f.

4. Purposes of Processing Your Personal Data

Your personal data will be processed for the following purposes in accordance with Articles 5 and 6 of the KVKK:

  • Service Provision and Contract Execution:
    • Creating, managing, invoicing, and securing your OPL-AI.com account.
    • Technically providing **Work and Analysis, Mapping, Task Management, and Optimization Module** services.
    • Enabling the analysis and reporting (enhanced by AI interpretation) of collected process, duration, and location data within your **license holder account.**
  • Service Improvement and Security:
    • Analyzing usage patterns to improve service quality and platform performance.
    • Complying with legal obligations and conducting information security processes (IP data).

5. Recipients and Purpose of Data Transfers

Membership and invoicing data (Company Data) may be transferred to official institutions and authorized third parties for legal and financial obligations. **Application Usage Data (Process, Duration, Location) is strictly not shared externally and is stored only for the account owner (Main User) to view.**

6. Retention Period of Personal Data

  • Membership registration data is retained during the term of your membership and in accordance with applicable legal statute of limitations.
  • **Application Usage Data (Process, Duration, Location):** Stored for **one (1) year** from the license key expiration date. It will be automatically deleted within 30 days after the license expiry.
  • Upon the request of the account owner, application usage data will be deleted within **3 (three) business days** (in accordance with legal storage requirements).

7. Your Rights as a Data Subject (KVKK Article 11) and Limitation of Liability

As a personal data owner, you have rights including learning if your data is processed, requesting information, and requesting erasure (as applicable to membership data).

**Disclaimer and Application:** The primary data controller for personal data collected via OPL-AI Modules is the **License Holder User (Main User)**. All legal, criminal, or administrative liability arising from the unlawful collection, use, or failure to inform sub-users regarding this data is the **exclusive responsibility of the User.**

To exercise your rights, you may submit your requests in writing or by other current methods determined by the Personal Data Protection Authority. Your application will be finalized within 30 days.

Application Address: İstanbul, Türkiye

Email Address (via secure e-signature or from your registered email): info@opl-ai.com

8. Changes

This Disclosure Statement may be updated from time to time due to changes in legislation or our data processing practices. Updates will be published on the OPL-AI.com website.