Privacy and Data Protection Policy

Under applicable data-protection law, the data controller for AQRYO is BUUME Bilişim Teknoloji Reklamcılık Anonim Şirketi, Büyükesat Mahallesi Koza 1 Caddesi No: 153/4 Çankaya / Ankara. Contact: hey@buum-e.com.

Depending on how AQRYO is used, we may process account and contact information, email address, creator profile data, content and interaction records, purchase and payment records, device and connection information, IP address, technical logs and security records.

We process data to create and manage accounts, provide content creation and publishing features, operate payments, provide support, protect platform security, prevent abuse and fraud, meet legal obligations and improve AQRYO.

Processing may rely on performance of a contract, compliance with legal obligations, establishment or protection of legal rights, legitimate interests that do not override fundamental rights, and consent where consent is legally required.

Where necessary to provide the service, data may be shared with payment, hosting, infrastructure, authentication, email, communications, security and fraud-prevention providers, and with competent authorities when required by law.

Participation in public AQRYO experiences may not require an account. Information voluntarily supplied for communication with a creator is used only for the stated purpose and may be shared with that creator when this is clear to the participant.

For anonymous questions and confessions, the sender’s identity is not shown to the creator. IP address, device information and similar technical identifiers are not shown in the creator dashboard or shared with the creator. AQRYO may process limited technical records for security, abuse prevention, fraud investigation and legal obligations; these records are not provided to the recipient to identify an anonymous sender.

Payments are processed through authorized payment providers. AQRYO does not store sensitive card data such as the full card number or card security code in its own systems.

Personal data is retained only as long as needed for the relevant purpose and applicable legal retention periods. When retention is no longer required, data is deleted, destroyed or anonymized as appropriate. Reasonable technical and organizational safeguards are used to protect data.

Depending on applicable law, you may have rights to learn whether your data is processed, request access, correction or deletion, object to or restrict certain processing, and learn about relevant recipients. Users in Türkiye also have the rights provided by Article 11 of Law No. 6698 (KVKK).

Privacy and personal-data requests can be sent to hey@buum-e.com. We may request information needed to verify identity before completing a request.