Form Privacy Notice

This is the privacy notice on the processing of personal data collected through the contact, demo request, plan wizard, partnership application, and data deletion request forms on the fonify.co website. Where the General Data Protection Regulation (GDPR) applies to you, it also serves as our Article 13 disclosure.

Fonify (Defsoft Bilişim Teknolojileri Anonim Şirketi) is referred to below as "Fonify" or the "Company".

As Defsoft Bilişim Teknolojileri Anonim Şirketi (the "Company"), acting as data controller under the Turkish Personal Data Protection Law No. 6698 (the "Law"), we process the personal data collected through the forms on the fonify.co website in the framework described below.

• Legal name: Defsoft Bilişim Teknolojileri Anonim Şirketi
• Address: Üniversiteler Mah. İhsan Doğramacı Bul. No: 31 İç Kapı No: 24 Çankaya/Ankara, Türkiye
• MERSIS: 0272118846700001
• Email: [email protected]
• Contact point: [email protected]

Data collected through the Contact Form (/en/contact):

• Full name: Required
• Email address: Required
• Telephone number: Required
• Message: Required
• Newsletter subscription preference: Optional
• Attribution data: Automatic (campaign parameters and referring site address recording which channel brought you to our site)

• Telephone number: Required
• Language preference: Required
• Verification code: Required (sent over WhatsApp to confirm the number belongs to you)

When you request a demo, the number you provide is called by our AI assistant. The call data generated during that call is covered by the App Privacy Notice.

• Full name: Required
• Telephone number: Required
• Email address: Optional
• Company name: Optional
• Note: Optional
• Business profile answers: sector, needs, call direction, daily call volume, average call duration, existing solution and its cost, telephone infrastructure, service languages, after-hours needs, and whether you are the decision maker
• Newsletter subscription preference: Optional

The answers you give in the wizard are stored temporarily in your browser's local storage so they are not lost if you leave the page before completing the form. Your contact details are not included in that draft.

• Full name: Required
• Email address: Required
• Telephone number: Required
• Company name: Required
• Audience description and size: Required
• Consent checkbox: Required

• Email address: Required

• Email address or telephone number: At least one required
• Full name: Optional
• Scope of the request: Required
• Note: Optional
• IP address and browser information: Automatic (to verify the request and prevent abuse)

Personal data collected through the forms is processed for the following purposes:

• Contact Form. Performance of a contract (Art. 5/2-c); legitimate interest (Art. 5/2-f): answering the requests and questions you submit
• Demo Request Form. Performance of a contract (Art. 5/2-c): placing the demo call and verifying your number
• Plan Wizard. Performance of a contract (Art. 5/2-c); legitimate interest (Art. 5/2-f): offering a plan and service recommendation suited to your needs and contacting you
• Partnership Application. Performance of a contract (Art. 5/2-c): evaluating your application and running the partnership process
• Newsletter Subscription. Explicit consent (Art. 5/1): sending marketing emails, campaign and announcement notifications
• Data Deletion Request Form. Legal obligation (Art. 5/2-ç): meeting the erasure request under Articles 7 and 11 of the Law
• Data Deletion Request Form (IP and browser information). Legitimate interest (Art. 5/2-f): verifying that the request comes from the actual data subject and preventing abuse
• Attribution data. Legitimate interest (Art. 5/2-f): measuring which channel our marketing activity produces results through
• All forms. Legal obligation (Art. 5/2-ç): meeting the lawful requests of authorised public authorities

If you do not consent to the newsletter, only the marketing emails are not sent; the evaluation of your submission and our response to you are unaffected. You may withdraw your consent at any time.

Automated call notice: requests you leave through the contact form or the plan wizard may result in our AI assistant calling you automatically, so our team can respond faster.

Domestic transfers:

• Your data may be shared with authorised public authorities where legally required. (Art. 8/2-a, Art. 5/2-ç)

International transfers:

The infrastructure components that process form data run on providers located outside Türkiye:

• Vercel Inc. (USA): the hosting infrastructure the form is submitted to.
• Supabase: the database holding partnership application records.
• Resend: newsletter subscription records and transactional email delivery.
• Telegram: delivering new application and request notifications to our sales team.

The WhatsApp message sent to verify your number for a demo request is delivered through workflow infrastructure under our own control.

These transfers are carried out within the framework of Article 9 of the Law.

Personal data collected through the forms is retained for one year after your request has been answered and the related process completed, and is deleted or anonymised at the end of that period.

If a contractual relationship is established between us, data relating to invoicing and accounting records is retained for the statutory retention periods set out in the Turkish Tax Procedure Law and the Turkish Commercial Code.

Your email address held for the newsletter is retained until you unsubscribe.

Under Article 11 of the Law you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing; to know the third parties in Türkiye or abroad to whom it has been transferred; to request rectification if it is incomplete or inaccurate; to request erasure or destruction; to request that these operations be notified to third parties to whom the data was transferred; to object to a result to your detriment arising from analysis by exclusively automated systems; and to claim compensation for damage arising from unlawful processing. Where the GDPR applies, you also hold the corresponding rights of access, rectification, erasure, restriction, portability, and objection.

You can send applications to [email protected]. You can also use the form on the Data Deletion Request page to request erasure of your data. For details of the application procedure, see our Website Privacy Notice.

This notice may be updated in line with legal developments or changes in our data processing activities. The current text is always published at fonify.co/en/legal.