KVKK Privacy Notice
Dring Yapay Zeka ve Büyük Veri Teknoloji Hizmetleri A.Ş.
Last updated: September 2026
1. Identity of the Data Controller
This notice is prepared under Law No. 6698 on the Protection of Personal Data ("KVKK") to inform data subjects about personal data processed by Dring Yapay Zeka ve Büyük Veri Teknoloji Hizmetleri A.Ş. ("Dring AI") in its capacity as data controller.
Legal name: Dring Yapay Zeka ve Büyük Veri Teknoloji Hizmetleri A.Ş.
Address: Levent, Esentepe, Talat Paşa Cd. No: 5/1, 34394 Şişli, Istanbul, Türkiye
Contact: [email protected]
2. Categories of Personal Data Processed
Dring AI may process the following categories of personal data in the course of its activities:
- Website visitors: Full name, email address, phone number, IP address, cookie data, and site usage information
- End users: Phone number, call recordings and transcripts, call metadata (duration, timestamp, call disposition), sentiment and conversation analytics
- People who contact us via WhatsApp: WhatsApp message content, message metadata (timestamp, delivery/read status), profile name, shared media files
- Client company representatives: Contact details (name, email, phone, company name) and billing information
3. Purposes of Processing Personal Data
Personal data is processed to deliver AI-powered voice and chat agent services, to process and respond to call and messaging traffic in real time, to present post-call/post-chat analysis and reports (summary, sentiment score, resolution status) on Client dashboards, to monitor and improve service quality, to communicate with Client company representatives, to carry out billing and support processes, and to fulfill legal obligations.
4. Legal Bases for Processing
Personal data is processed on the basis of the following legal grounds set out in Article 5 of the KVKK:
- Directly related to the establishment or performance of a contract (Art. 5/2-c)
- Mandatory for the data controller's legitimate interest (Art. 5/2-f)
- Explicitly provided for by law and necessary to fulfill a legal obligation (Art. 5/2-a, 5/2-ç)
- Explicit consent, where required, in particular for direct marketing communications (Art. 5/1)
5. Transfer of Personal Data
Personal data may be shared, to the extent necessary for the provision of the service and in accordance with the conditions set out in Articles 8 and 9 of the KVKK, with the following categories of domestic and foreign service providers:
- AI and large language model providers (for real-time processing of conversation content)
- Speech-to-text and text-to-speech providers
- Cloud infrastructure and hosting providers
- Telecommunications and voice infrastructure providers (domestic and foreign carriers)
- Database, caching, and analytics/monitoring service providers
Where personal data is transferred abroad, this is carried out under Article 9 of the KVKK, either to countries recognized as providing adequate protection or through appropriate safeguards prescribed by the Personal Data Protection Board (such as standard contractual clauses or data processing agreements). In some cases, Dring AI processes data belonging to a Client's end users solely as a data processor acting on that Client's behalf; in such cases, the relevant Client is the data controller.
6. Retention Periods for Personal Data
| Data Type | Retention Period | After Retention |
|---|---|---|
| WhatsApp message content | Up to 12 months from the interaction, or as specified in the Client contract | Permanently deleted or anonymized |
| Voice call recordings | Up to 12 months, or as required by the Client contract | Permanently deleted or anonymized |
| Post-call/post-chat analytics | Duration of the Client contract plus 6 months | Anonymized or deleted |
| Client account data | Duration of the contract plus 12 months | Deleted on request or at the end of the retention period |
| Website visitor data (cookies, analytics) | Up to 12 months | Automatically purged |
Client companies may at any time request earlier deletion of data belonging to their own end users.
7. Your Rights Under Article 11 of the KVKK
Under Article 11 of the KVKK, as a data subject you have the right to:
- Learn whether your personal data is being processed
- Request information about the processing of your personal data, if it has been processed
- Learn the purpose of processing your personal data and whether it is used in accordance with that purpose
- Know the third parties, domestic or abroad, to whom your personal data has been transferred
- Request correction of your personal data if it has been processed incompletely or incorrectly
- Request the deletion or destruction of your personal data within the conditions set out in the KVKK
- Request that any correction, deletion, or destruction be notified to third parties to whom your personal data has been transferred
- Object to a result that is to your detriment arising solely from analysis of your data through automated systems
- Request compensation for damages arising from the unlawful processing of your personal data
8. How to Apply
To exercise the rights listed above, you may submit your request to Dring AI:
- By email, to [email protected]
- By registered mail with return receipt, in writing, to the address above
- Via registered electronic mail (KEP) or through e-Devlet, with identity verification
Your application will be concluded as soon as possible, and within the legal period prescribed by the KVKK, depending on the nature of the request.
Related pages: Privacy Policy, Terms of Service, Cookie Policy.