KVKK Privacy Notice
This text is a translation for information only; the Turkish text is binding.
In accordance with the Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by CodeSMS, acting as the data controller, within the scope described below.
1. Data Controller
CodeSMS
Email: destek@codesms.org
2. Personal Data Processed
- Identity and Contact Information: name, email address; optional Telegram username and chat ID.
- Customer Transactions: purchased numbers, received SMS codes and messages, balance top-up and refund records, support correspondence.
- Financial: sender name as stated in payment notifications, transaction/statement references, crypto transaction IDs (your card information is not stored by us; it is processed by the payment provider).
- Transaction security: IP address, login logs, browser information, API request logs.
3. Purposes of Processing and Legal Grounds
- Establishment and performance of the membership and service agreement: provision of a phone number, delivery of the SMS code, balance and refund transactions (KVKK Art. 5/2-c).
- Compliance with legal obligations: record-keeping and retention obligations under tax and consumer legislation, requests from authorized authorities (KVKK Art. 5/2-ç).
- Legitimate interest: ensuring account security, preventing fraud and misuse of the service (KVKK Art. 5/2-f).
- Your explicit consent: optional notification channels (e.g., Telegram) and analytics cookies.
4. Transfer
Your personal data may be transferred, limited to the purposes stated above, to number providers (only service/country information necessary for the transaction), payment and email service providers, hosting (server) service providers, and, upon request, to authorized public institutions and organizations. If some service providers’ servers are located abroad, the transfer is carried out in accordance with the conditions set forth in Article 9 of the Personal Data Protection Law (KVKK).
5. Method of Collection
Your data is collected electronically and automatically through membership, purchase, balance top-up, and support forms, as well as during your use of the website and API.
6. Retention Period
Your data is retained for the duration required by the purpose of processing and for the statutory retention periods stipulated in relevant legislation; at the end of this period, it is deleted, destroyed, or anonymized. SMS content is retained for a limited time to provide the service and to address potential disputes.
7. Your Rights
Under Article 11 of the KVKK, you have the right to: learn whether your data is being processed; request information; learn the purpose of processing; know to whom your data has been disclosed; request the correction of incomplete or incorrect data; request the deletion of your data in accordance with the conditions set forth in Article 7 of the KVKK; object to a decision made against you as a result of analysis by automated systems, and request compensation for damages if you have suffered harm due to unlawful processing.
You may submit your requests via email to destek@codesms.org. Requests will be processed free of charge within 30 days at the latest.