Privacy Policy
Effective date: September 14, 2026
ThinkVoice AI | ThinkVoice Bilişim Anonim Şirketi
Article 1. Scope and Purpose
1.1. This Privacy Policy ("Policy") applies to the website thinkvoice.ai ("Website"), operated by ThinkVoice Bilişim Anonim Şirketi ("ThinkVoice", "ThinkVoice AI", "Company", "we", "us" or "our").
This Policy explains the purposes and legal grounds for processing personal data collected when you visit our Website or submit contact, demonstration, or information request forms, the parties to whom such data may be disclosed or transferred, and your rights concerning your personal data.
1.2. The Website is provided for corporate information, business promotion, and communication purposes. Visitors cannot create user accounts, purchase subscriptions, or make payments through the Website. Accordingly, payment details, billing information, and payment card data are not processed within the scope of this Policy.
1.3. This Policy applies together with the Terms of Use and Cookie Policy published on the Website. In the event of any inconsistency between these documents concerning the processing of personal data, this Privacy Policy shall prevail.
Article 2. Identity of the Data Controller
The data controller responsible for the personal data processed within the scope of this Policy is:
Information | Details |
|---|---|
Legal Entity | ThinkVoice Bilişim Anonim Şirketi |
Registered Address | Merdivenköy Mah. Dikyol Sk. B Blok No: 2, İç Kapı: 138, Kadıköy, Istanbul, Türkiye |
Tax Office / Tax Number | Göztepe / 8430920791 |
Registered Electronic Mail (KEP) | |
Contact Email |
Article 3. ThinkVoice's Data Protection Roles
3.1. ThinkVoice acts as the data controller with respect to personal data collected through the Website. This Policy exclusively governs the processing activities carried out within this scope.
3.2. With respect to call recordings and related personal data processed through the AI-powered Call Analytics and Voice Assistant services provided to our enterprise customers, the relevant enterprise customer acts as the data controller, while ThinkVoice acts as the data processor.
In this capacity, ThinkVoice processes such data solely on the instructions of the relevant enterprise customer and within the scope of the applicable contractual arrangements.
Such call recordings and related service data are not collected through the Website.
3.3. If you wish to exercise your data protection rights in connection with a telephone conversation with one of our enterprise customers, you should direct your request to the relevant organization acting as the data controller.
Any such request received by ThinkVoice will be forwarded to the relevant organization without undue delay.
3.4. Voice data processed as part of our services is used for speech-to-text transcription and analysis of conversational content.
As these processing activities are not intended for identity verification or identification of individuals, such voice data is not considered biometric data within the meaning of the KVKK solely by virtue of its use for these purposes.
Article 4. Categories of Personal Data Processed
Within the scope of the Website, we may process the following categories of personal data:
4.1. Identity and Contact Information
First and last name, corporate email address, telephone number, company name, and professional title or position.
This information is collected only when you submit a contact form, request a product demonstration, or complete an information request form.
4.2. Inquiry and Communication Information
Messages, inquiries, requests, and correspondence submitted through Website forms or by email.
4.3. Information Security and Technical Data
IP address, browser and device information, operating system, access and server logs, visit dates, and session duration.
4.4. Cookies and Website Usage Data
Pages visited, click interactions, navigation behavior, and user preferences collected through cookies and similar technologies.
Special Categories of Personal Data
The Website does not request or intentionally process special categories of personal data as defined under Article 6 of the KVKK.
Please refrain from including such information in Website forms or other communications submitted to us.
Article 5. Purposes and Legal Grounds for Processing Personal Data
We process personal data for specified, explicit, and legitimate purposes in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK" or "Law").
The relevant processing activities, data categories, and legal grounds are outlined below.
Purpose of Processing | Personal Data Processed | Legal Basis under Article 5 of the KVKK |
|---|---|---|
Operating, maintaining, securing, and technically administering the Website | Information security data and strictly necessary cookies | Article 5(2)(f): Legitimate interests; Article 5(2)(ç): Compliance with legal obligations, where recordkeeping is legally required |
Responding to contact requests, demonstration inquiries, and information requests, including managing quotation processes | Identity information, contact details, and inquiry content | Article 5(2)(c): Necessity for the establishment or performance of a contract, where applicable; Article 5(2)(f): Legitimate interests |
Managing corporate communications and customer relationships | Identity information, contact details, and correspondence records | Article 5(2)(f): Legitimate interests |
Measuring Website usage, analyzing visitor interactions, and improving user experience | Page views, click events, session information, and usage data collected through PostHog | Article 5(1): Explicit consent |
Conducting promotional and marketing activities and sending commercial electronic communications | Contact information, including name, email address, and telephone number | Article 5(1): Explicit consent; separate approval under Article 6 of Law No. 6563 for commercial electronic communications |
Establishing, exercising, or protecting legal rights in connection with disputes | Relevant transaction records and communications | Article 5(2)(e): Necessity for the establishment, exercise, or protection of a right |
Processing based on legitimate interests is carried out only where such processing is necessary and does not adversely affect the fundamental rights and freedoms of the individuals concerned.
Where explicit consent is required, it is obtained separately from the provision of this Policy.
Article 6. Methods of Personal Data Collection
6.1. Your personal data is collected through the following methods:
Automatically or partially automatically: Through cookies, similar technologies, server logs, and access records generated during your visits to the Website.
Directly from you: Through information voluntarily provided when completing Website forms, submitting demonstration requests, or communicating with ThinkVoice by email.
The data collected through these methods is processed in accordance with the purposes and legal grounds specified in Article 5.
Article 7. Disclosure and Transfer of Personal Data
7.1. Your personal data may be disclosed or transferred only to the extent necessary for the relevant processing purposes and in accordance with Articles 8 and 9 of the KVKK.
Depending on the processing activity, recipients may include:
Infrastructure, hosting, and content delivery providers: Service providers supporting Website hosting, security, technical operations, and content delivery network (CDN) services.
Analytics and marketing technology providers: Relevant service providers where analytics or marketing technologies are used.
Authorized public authorities: Public institutions, regulatory authorities, and judicial bodies where disclosure is required to comply with legal obligations.
Professional advisers: Lawyers, auditors, and other authorized professional advisers where necessary for legal compliance or the protection of rights.
7.2. ThinkVoice does not sell, rent, or transfer personal data to third parties for their independent marketing purposes.
Article 8. International Transfers of Personal Data
8.1. The Website uses a content delivery network (CDN) service to improve content distribution, Website performance, and availability.
Personal data relating to Website visitors is not stored on this service as part of the intended Website configuration. The CDN is used for content delivery and performance optimization purposes.
8.2. Connection data, including IP addresses, may pass through CDN distribution points located outside Türkiye.
In addition, analytics or marketing tools may be provided by service providers established or operating outside Türkiye.
Where such activities involve international transfers of personal data, the transfers are conducted in accordance with Article 9 of the KVKK.
An applicable adequacy decision is considered first. Where no such decision exists, the transfer is based on appropriate safeguards as provided under applicable legislation.
8.3. ThinkVoice does not rely on explicit consent as the legal mechanism for its international data transfers.
For transfers of a continuous or recurring nature, appropriate safeguards are implemented in accordance with Article 9(2) of the KVKK. Where required by applicable legislation, the relevant notifications are submitted to the Turkish Personal Data Protection Authority.
Article 9. Personal Data Retention Periods
Personal data is retained for the periods specified below, subject to applicable statutory obligations and the relevant processing purposes.
Data Category | Retention Period |
|---|---|
Contact and demonstration request records where no commercial relationship is established | 2 years following the resolution of the relevant request |
Communication records where a commercial relationship is established | For the applicable statutory limitation and retention periods following termination of the contractual relationship |
Information security and server access logs | Maximum of 1 year, unless a different statutory retention period applies under Law No. 5651 or other applicable legislation |
Commercial electronic communication consent and opt-out records | 1 year following withdrawal of consent; records relating to commercial electronic communications are also retained for 1 year |
Cookie-related data | For the periods specified by cookie category and individual cookie in our Cookie Policy |
Once the applicable retention period expires, personal data is deleted, destroyed, or anonymized in accordance with our Personal Data Retention and Destruction Policy.
Article 10. Data Security Measures
10.1. In accordance with Article 12 of the KVKK, ThinkVoice implements appropriate technical and organizational measures designed to prevent unlawful processing of personal data, unauthorized access, and loss of data confidentiality or integrity.
These measures include, as applicable:
Encryption of personal data during transmission and storage.
Role-based access controls and authorization mechanisms.
Multi-factor authentication.
Network and infrastructure security controls.
Audit trails, logging, and access monitoring.
Regular data backups.
Confidentiality undertakings.
Employee training and information security awareness programs.
10.2. These safeguards are regularly reviewed within the framework of our information security management practices.
Where personal data is unlawfully obtained by unauthorized third parties, ThinkVoice fulfills the applicable notification obligations toward the affected individuals and the Turkish Personal Data Protection Board in accordance with Article 12(5) of the KVKK.
Article 11. Cookies and Tracking Technologies
11.1. The Website uses strictly necessary cookies to support essential functionality, security, and session management.
Functional, analytics, and marketing cookies may also be used.
Cookies other than strictly necessary cookies are activated only after obtaining your explicit consent.
11.2. Detailed information about cookie categories, their purposes, retention periods, and how to manage your preferences is provided in our Cookie Policy.
You may withdraw your consent at any time through the cookie preference management tool available on the Website.
Article 12. Commercial Electronic Communications
12.1. Commercial electronic communications relating to promotional activities, campaigns, and product or service information are sent only where the necessary approval has been obtained in accordance with Turkish Law No. 6563 on the Regulation of Electronic Commerce.
Consent and opt-out processes are managed through the Commercial Electronic Message Management System (İleti Yönetim Sistemi – İYS), in accordance with applicable legislation.
12.2. You may unsubscribe from commercial electronic communications at any time by using the unsubscribe link provided in the relevant message or by contacting us at [email protected].
Your opt-out request will be processed within the period prescribed by applicable legislation.
Article 13. Children's Personal Data
13.1. The Website is intended for business and professional audiences and is not directed at individuals under the age of eighteen (18).
ThinkVoice does not knowingly collect personal data from children through the Website.
If we become aware that personal data relating to a child has been collected or processed through the Website, such data will be deleted or otherwise destroyed without undue delay, in accordance with applicable law.
Article 14. Third-Party Websites and External Links
14.1. The Website may contain links to third-party websites, platforms, or social media accounts.
ThinkVoice is not responsible for the content, privacy practices, or data protection policies of such third-party websites or services.
We recommend reviewing the applicable privacy policies of third-party services before providing any personal information or interacting with their platforms.
Article 15. Your Rights as a Data Subject
Under Article 11 of the KVKK, you have the following rights regarding your personal data:
Right to information: To learn whether your personal data is being processed.
Right of access: To request information concerning the processing of your personal data, where such processing has occurred.
Purpose limitation: To learn the purposes for which your personal data is processed and whether it is used in accordance with those purposes.
Information on data recipients: To know the third parties to whom your personal data has been transferred, whether within Türkiye or internationally.
Right to rectification: To request the correction of incomplete or inaccurate personal data.
Right to deletion or destruction: To request the deletion or destruction of your personal data under the conditions specified in Article 7 of the KVKK.
Notification to third parties: To request that the correction, deletion, or destruction of personal data be communicated to third parties to whom the data has been transferred.
Right to object to automated processing: To object to a result that adversely affects you and arises exclusively from the analysis of your personal data through automated systems.
Right to compensation: To request compensation for damages resulting from the unlawful processing of your personal data.
These rights may be exercised in accordance with the applicable procedures, conditions, and limitations set out under Turkish data protection legislation.
Article 16. Exercising Your Rights
16.1. You may submit requests concerning your personal data in accordance with the Communiqué on the Principles and Procedures for Applications to the Data Controller.
Applications may be submitted through the following channels:
Application Method | Contact Details |
|---|---|
Written Application | Merdivenköy Mah. Dikyol Sk. B Blok No: 2, İç Kapı: 138, Kadıköy, Istanbul, Türkiye |
Registered Electronic Mail (KEP) | |
[email protected], using an email address previously registered in our systems |
16.2. Your application will be reviewed and resolved as soon as possible, depending on the nature of your request, and in any event within thirty (30) days of receipt.
Applications are generally processed free of charge. However, where processing a request requires additional costs, a fee may be charged in accordance with the tariff established by the Turkish Personal Data Protection Board.
Article 17. Amendments and Effective Date
17.1. ThinkVoice may revise this Privacy Policy to reflect changes in applicable laws and regulations or updates to the Website, business operations, and related services.
The latest version will be published on the Website together with its effective date.
Material changes to this Policy will also be communicated separately, where appropriate.
17.2. This Privacy Policy became effective on September 14, 2026.
ThinkVoice AI
Intelligent Voice Technologies & AI-Powered Customer Experience Solutions
ThinkVoice Bilişim Anonim Şirketi
Website: https://thinkvoice.ai
Email: [email protected]
