Privacy Policy

Last updated: 4 August 2026

This text explains which data is processed, and for which purposes, when you use the Ahşapmetrik app and the services under the ahsapmetrik.com domain (the "Service"). The Service is operated in line with the obligations of Turkish Personal Data Protection Law no. 6698 (KVKK).

Data controller: X Ahşap Limited Şirketi — Fabrikayanı Mevkii, Fabrikayanı Küme Evler No: 142, Zafer Köyü, Ulus / Bartın. Contact: destek@ahsapmetrik.com, contact page.

Toplanan veriler

• Account information: first and last name, e-mail address and password (passwords are stored as irreversible hashes).
• Sign in with Google: if you choose it, the name and e-mail address of your Google account are received; your Google password is never sent to the Service.
• Sign in with Apple: if you choose it, the e-mail address of your Apple Account (and your name, if you choose to share it) is received; your Apple password is never sent to the Service. If you choose "Hide My Email", the relay address generated by Apple is used and your real address never reaches us.
• Company data: the business records your company enters into the Service (stock, auctions, shipments, customers, quotes and the like). This data belongs to your company and is seen only by your company's authorised users.
• Technical records: error and access logs (including IP address) are kept for a limited time for the security of the service and for fault diagnosis.

Purposes of processing

• Creating the account, authentication and session management
• Providing the Service: storing and processing company data
• Mandatory notifications (e.g. invitations, password reset, subscription reminders) — no marketing e-mail is sent
• Security: preventing abuse and diagnosing faults

Protection of data

• All traffic is encrypted with TLS.
• Fields containing personal data are stored encrypted in the database; company data is isolated per tenant.
• Data is hosted on servers in the European Union region.

Third parties

Data is not sold and is not shared for advertising. The infrastructure providers with which limited sharing takes place so that the Service can run:

• Google Firebase — authentication (Sign in with Google and Sign in with Apple) and mobile notifications
• Hosting provider — operation of the servers (EU region)
• E-mail provider — delivery of mandatory notification e-mails

Cookies and local storage

Only the technical records needed to keep your session are used; there are no advertising or tracking cookies.

The measurement list you build on the m³ calculator page stays in your own browser (local storage); it is not sent to us and we cannot see it. Clearing your browser data clears the list too.

Retention and deletion

Account data is kept for as long as the account remains open. When you choose "Delete my account" inside the app the account is DELETED: your name, e-mail address and other personal fields are irreversibly anonymised, your session is closed on every device, and that account can no longer sign in. Records subject to a statutory retention obligation are kept without information identifying you. Technical records are kept for at most 90 days.

Your rights

Under article 11 of the KVKK you have the right to access your data, to request its correction or deletion, and to object to processing. For such requests you can write to the contact address below.

Contact

For privacy questions and requests: destek@ahsapmetrik.com