KVKK, Information Notice and Privacy Policies

This document includes three separate legal texts prepared by ARKENOVA Teknoloji A.Ş.: the Information Notice, Personal Data Protection Policy, and Privacy Policy. All texts have been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and related legislation.

Information Notice

As ARKENOVA Teknoloji A.Ş., we attach great importance to the privacy and security of your personal data.
This Information Notice has been prepared to inform data subjects in accordance with the KVKK.

1. Data Controller

Data Controller: ARKENOVA Teknoloji A.Ş.
Address: Biruni Teknopark, Kazlıçeşme Mah. 245. St. No:5 Zeytinburnu / Istanbul
Email: kvkk@callby.ai

2. Processed Personal Data

Identity, contact, voice and correspondence records, system logs, device and usage data may be processed.

3. Purposes of Processing

Data is processed for service provision, customer satisfaction, technical support, security, and fulfillment of legal obligations.

4. Legal Grounds

Data is processed based on explicit consent, performance of a contract, legitimate interest, and legal obligations as stated in Articles 5 and 6 of the KVKK.

5. Transfers

Data may only be shared with service providers, business partners, and legal authorities.

6. Retention Period

Data is retained for the period specified in the relevant legislation or as long as the processing purpose continues.

7. Your Rights

Under Article 11 of the KVKK, you have the right to learn whether your data is processed, and to request correction or deletion.

Contact: kvkk@callby.ai

Personal Data Protection Policy

1. Purpose and Scope

This policy defines Callby’s principles, responsibilities, and implementation procedures regarding the protection of personal data.

2. Core Principles

• Processing in accordance with the law and good faith
• Being accurate and up to date
• Processing for specific, explicit, and legitimate purposes
• Proportionality and limitation
• Retention for as long as necessary

3. Data Security Measures

Data is stored in encrypted form, and access rights are restricted. Secure servers, firewalls, and monitoring systems are used.

4. Sharing with Third Parties

Personal data is shared only with third parties that provide security guarantees and only when necessary.

5. Policy Updates

The policy may be updated in line with legal changes and technological developments. The latest version is published at:
www.callby.ai/kvkk-politikasi

Privacy Policy

1. General Information

Callby is committed to protecting users’ privacy. This policy explains how personal data is collected, used, and protected.

2. Collected Data

Identity and contact information, device data, cookies, and voice/written communication content may be collected.

3. Purposes of Use

Data is used for service delivery, improvement, security, analysis, customer relations, and legal obligations.

4. Cookies

Cookies are used on the website and applications to improve user experience.

5. Data Security

HTTPS, data encryption, access controls, and security monitoring systems are implemented.

6. User Rights

Users may exercise their rights under the KVKK via kvkk@callby.ai.

7. Updates

This policy may be updated in accordance with legal or technological changes. The latest version is published at:
www.callby.ai/gizlilik-politikasi

Our Integrated Management Systems Policy

Callby.ai is a technology company operating in the field of AI-powered customer representative technologies. It adopts principles of quality, customer satisfaction, efficiency, and continuous improvement in all its processes.

From the design to the delivery of our services, we aim to comply with national and international standards, fully adhere to legislation and legal requirements, meet customer expectations at the highest level, and continuously measure and improve process performance.

Callby.ai adopts a management structure compliant with ISO 9001 Quality Management System standards. All employees actively participate in setting, implementing, and continuously improving quality objectives.

Our goal is to develop reliable, innovative, and sustainable technologies, add value to our customers and business partners, and play a leading role in our country’s digital transformation.

Our Information Security Management System

Callby.ai considers information security an integral part of its corporate culture. All data processed in our AI call and communication systems is protected in line with the principles of confidentiality, integrity, and availability.

In accordance with ISO 27001 Information Security Management System standards, Callby.ai safeguards information assets against unauthorized access, loss, corruption, or misuse.

The main objectives of our information security policy are:

• Ensuring the confidentiality of customer and partner data
• Managing information assets securely
• Identifying risks in advance and taking necessary measures
• Increasing employee awareness
• Regularly auditing and updating security systems
• Responding quickly, transparently, and effectively to potential security breaches

For Callby.ai, information security is not only a technical requirement but also a fundamental element of maintaining customer trust and corporate reputation.

In all our activities, the principle is that the right information is accessible at the right time, only by authorized persons.