Privacy Policy
PRIVACY POLICY
# 1. INTRODUCTION
This Privacy Policy explains how Noya Plastik Fidancılık İnşaat Sanayi Ticaret Limited Şirketi (“Noya”, “we”, “our”, or “us”) collects, uses, stores, processes, and protects personal data in connection with the use of the Noya Flow platform, website, software services, and related functionalities available through:
https://noyaflow.app
This Privacy Policy applies to:
- visitors of the Website,
- registered users,
- subscribers,
- customers,
- and individuals interacting with the platform or related services.
By accessing or using the platform, users acknowledge that they have read and understood this Privacy Policy.
# 2. DATA CONTROLLER
The data controller responsible for the processing of personal data under applicable legislation is:
Noya Plastik Fidancılık İnşaat Sanayi Ticaret Limited Şirketi
Address:
İsmetpaşa Mahallesi İzmit Yolu Üzeri No:40 Merkez/Yalova, Türkiye
Email:
info@noyaflow.com
Website:
https://noyaflow.app
# 3. INFORMATION WE COLLECT
We may collect, store, and process different categories of information depending on how users interact with the platform and services.
The information we collect may include:
## Account Information
When users create an account or subscribe to the platform, we may collect:
- name and surname,
- email address,
- account credentials,
- billing information,
- subscription status,
- and other account-related details.
## Project and Platform Data
When users use the platform, we may collect and store:
- irrigation project data,
- drawings and layouts,
- technical configurations,
- pressure and flow inputs,
- generated irrigation plans,
- exported files,
- saved project history,
- user preferences,
- and platform interaction data.
## Community and User Content
Where community features are available, we may collect content voluntarily submitted by users, including:
- comments,
- public profile information,
- uploaded content,
- shared projects,
- and community interactions.
## Technical and Device Information
We may automatically collect certain technical information including:
- IP address,
- browser type,
- device information,
- operating system,
- language preferences,
- access times,
- referring URLs,
- usage statistics,
- crash reports,
- and interaction analytics.
## Payment and Subscription Information
Payments may be processed through third-party payment providers.
We do not directly store full payment card details on our servers unless explicitly stated otherwise by the payment provider integration being used.
Payment providers may process:
- billing information,
- transaction identifiers,
- payment status,
- and subscription-related payment records.
## Cookies and Tracking Technologies
We may use:
- cookies,
- session technologies,
- analytics tools,
- local storage,
- and similar technologies
to improve platform functionality, maintain user sessions, analyze usage patterns, and enhance user experience.
# 4. HOW WE USE INFORMATION
We may use the information we collect for purposes including but not limited to:
- providing access to the platform and services,
- creating and managing user accounts,
- processing subscriptions and payments,
- storing and synchronizing user projects,
- generating irrigation plans and technical outputs,
- improving platform functionality and performance,
- personalizing user experience,
- maintaining platform security,
- detecting fraud, abuse, unauthorized access, or technical issues,
- monitoring usage patterns and analytics,
- responding to support requests and communications,
- enforcing these Terms and other platform policies,
- operating community and sharing features,
- complying with legal obligations,
- and developing new tools, services, or platform features.
We may also use aggregated, anonymized, or non-identifiable data for:
- analytics,
- statistical reporting,
- system optimization,
- research,
- and platform improvement purposes.
Where required by applicable law, certain processing activities may be carried out based on the user’s consent.
# 5. LEGAL BASES FOR PROCESSING
We process personal data in accordance with applicable data protection legislation, including the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where applicable, other international privacy regulations.
Depending on the nature of the interaction with the platform, personal data may be processed based on one or more of the following legal grounds:
## Performance of a Contract
We may process personal data where necessary to:
- provide access to the platform,
- manage subscriptions,
- process payments,
- maintain user accounts,
- store projects,
- provide customer support,
- and fulfill our contractual obligations.
## Legitimate Interests
We may process personal data where necessary for our legitimate interests, including:
- improving platform functionality,
- maintaining security,
- preventing fraud and abuse,
- analyzing usage patterns,
- ensuring system stability,
- protecting intellectual property,
- enforcing platform policies,
- and developing new services or features,
provided that such interests do not override the user’s fundamental rights and freedoms.
## Legal Obligations
We may process personal data where necessary to comply with:
- legal obligations,
- regulatory requirements,
- tax and accounting obligations,
- court orders,
- law enforcement requests,
- or other applicable legal processes.
## Consent
Where required under applicable law, we may process certain personal data based on the user’s explicit consent, including for:
- marketing communications,
- promotional emails,
- optional cookies or analytics technologies,
- and other consent-based processing activities.
Users may withdraw their consent at any time, without affecting the lawfulness of processing carried out before such withdrawal.
# 6. ACCOUNT AND PROJECT DATA
The platform may allow users to create, store, manage, modify, export, and share irrigation-related projects and technical data.
Such data may include:
- irrigation layouts,
- drawings,
- sprinkler placements,
- pressure and flow configurations,
- generated recommendations,
- exported project files,
- project history,
- saved preferences,
- and other user-generated technical content.
Project data may be stored on cloud-based infrastructure operated by the Seller or its service providers for purposes including:
- platform functionality,
- synchronization,
- backup,
- account continuity,
- technical support,
- analytics,
- and service improvement.
Users retain ownership of the content and project data they create through the platform, subject to the rights and licenses granted under the platform Terms of Service.
Where community or sharing features are enabled, users acknowledge that content intentionally shared publicly may become accessible to other users or visitors of the platform.
The Seller does not claim ownership of private project content unless otherwise explicitly stated.
Users are solely responsible for:
- maintaining backup copies of important projects,
- reviewing generated outputs,
- managing publicly shared content,
- and ensuring that uploaded or shared materials do not violate applicable laws or third-party rights.
The Seller may access, review, or process project data where reasonably necessary for:
- technical support,
- platform maintenance,
- security purposes,
- legal compliance,
- abuse prevention,
- or service improvement.
# 7. COMMUNITY CONTENT
The platform may include community-oriented features that allow users to:
- create public profiles,
- share projects,
- publish comments,
- upload content,
- participate in discussions,
- and interact with other users.
Any content voluntarily shared through public or community features may become visible to other users or visitors of the platform.
Users remain solely responsible for all content they submit, upload, publish, or share through the platform.
Users represent and warrant that:
- they own or have the necessary rights to the content they share,
- the content does not violate applicable laws,
- and the content does not infringe any third-party intellectual property, privacy, or other rights.
Users may not share content that is:
- unlawful,
- misleading,
- abusive,
- defamatory,
- threatening,
- discriminatory,
- hateful,
- fraudulent,
- malicious,
- sexually explicit,
- harmful to the platform,
- or otherwise inappropriate.
The Seller reserves the right, at its sole discretion, to:
- remove content,
- restrict visibility,
- suspend accounts,
- limit access to community features,
- or take other reasonable moderation actions
where necessary to:
- enforce platform policies,
- maintain platform integrity,
- comply with legal obligations,
- or protect users and the platform.
By publishing or sharing content through public platform features, users grant the Seller a non-exclusive, worldwide, royalty-free license to host, display, reproduce, distribute, and use such content solely for the operation, promotion, and improvement of the platform and related services.
The Seller does not actively monitor all user-generated content and is not responsible for content shared by users through community features.
# 8. COOKIES AND ANALYTICS
The platform may use cookies, local storage, session technologies, analytics services, and similar tracking technologies to:
- maintain user sessions,
- authenticate accounts,
- remember user preferences,
- improve platform functionality,
- analyze usage patterns,
- monitor platform performance,
- enhance security,
- and improve overall user experience.
Cookies and similar technologies may include:
- essential cookies required for platform operation,
- authentication and session cookies,
- preference and functionality cookies,
- analytics and performance tracking technologies,
- and security-related technologies.
The platform may use third-party analytics and monitoring services including, but not limited to:
- Google Analytics,
- Vercel Analytics,
- and other analytics, infrastructure, or performance-monitoring providers.
These services may collect certain technical and usage-related information such as:
- IP address,
- browser type,
- device information,
- pages visited,
- session duration,
- interaction data,
- referral sources,
- and general usage statistics.
Users may control or disable certain cookies through browser settings or device preferences. However, disabling certain technologies may affect platform functionality, authentication, or user experience.
Where required under applicable law, non-essential cookies or analytics technologies may be used only with the user’s consent.
## First-party product analytics
Noya Flow may record first-party product usage events in our own database to operate the service, enforce usage limits, prevent abuse, improve reliability, and understand product usage in aggregate. This may include a persistent anonymous identifier stored in your browser (local storage), a per-session identifier (session storage), technical metadata such as page path and event names, and—after you sign in—a link between your prior anonymous activity and your account. We do not store project drawings, emails, or other sensitive content in these event records. Third-party analytics (such as Google Analytics or Vercel Analytics) are separate and, where required, depend on your cookie consent choices.
Additional information regarding cookies and tracking technologies may be provided through a separate Cookie Policy where applicable.
# 9. THIRD-PARTY SERVICES
The platform may rely on third-party service providers, infrastructure providers, analytics services, payment processors, authentication providers, cloud hosting services, and similar partners in order to operate, maintain, improve, and secure the platform and related services.
Such third-party services may include, but are not limited to:
- hosting and cloud infrastructure providers,
- analytics and monitoring services,
- payment and subscription processors,
- authentication and login providers,
- database and storage providers,
- customer support tools,
- communication services,
- and security or fraud-prevention services.
Examples of such providers may include:
- Google Analytics,
- Vercel,
- Stripe,
- İyzico,
- Neon,
- and similar service providers used by the platform from time to time.
These third-party providers may process certain personal or technical data solely for purposes related to:
- platform functionality,
- subscription management,
- payment processing,
- analytics,
- infrastructure maintenance,
- authentication,
- security,
- performance optimization,
- and legal compliance.
The Seller may share limited information with such providers only where reasonably necessary for the operation of the platform and related services.
Third-party services operate under their own terms, policies, and privacy practices. The Seller is not responsible for the independent privacy or security practices of third-party providers.
Where required under applicable law, international data transfers involving third-party providers shall be carried out in accordance with applicable data protection legislation and appropriate safeguards.
# 10. DATA SHARING AND TRANSFERS
The Seller may share, transfer, or disclose personal data only where reasonably necessary for the operation of the platform, the provision of services, compliance with legal obligations, or the protection of legitimate interests.
Personal data may be shared with:
- cloud hosting and infrastructure providers,
- payment processors and subscription providers,
- analytics and monitoring services,
- authentication providers,
- customer support and communication tools,
- technical service providers,
- legal, financial, or professional advisors,
- regulatory authorities,
- and other service providers necessary for platform operations.
Data sharing may occur for purposes including:
- providing platform functionality,
- processing subscriptions and payments,
- maintaining infrastructure and security,
- preventing fraud or abuse,
- performing analytics,
- complying with legal obligations,
- enforcing platform policies,
- and improving platform performance and services.
Certain third-party providers or infrastructure services may process data outside the user’s country of residence, including outside Türkiye.
Where international data transfers occur, the Seller shall take reasonable measures to ensure that such transfers are carried out in accordance with applicable data protection legislation and appropriate safeguards.
The Seller does not sell personal data to third parties.
Personal data may also be disclosed where required by:
- applicable law,
- court order,
- governmental authority,
- regulatory obligation,
- or legal process.
# 11. DATA RETENTION
Personal data may be retained for as long as reasonably necessary for:
- providing the platform and services,
- maintaining user accounts,
- preserving project functionality,
- fulfilling contractual obligations,
- complying with legal, tax, accounting, or regulatory obligations,
- resolving disputes,
- enforcing platform policies,
- and protecting legitimate business interests.
Retention periods may vary depending on:
- the type of data,
- the nature of the service provided,
- legal requirements,
- security considerations,
- and operational necessity.
Account-related information, subscription records, project data, and technical logs may be retained for reasonable periods following account closure, suspension, or inactivity where necessary for:
- legal compliance,
- fraud prevention,
- dispute resolution,
- backup systems,
- security investigations,
- or legitimate operational purposes.
The Seller may delete, anonymize, archive, or permanently remove data where retention is no longer reasonably necessary or legally required.
Users may request deletion of certain personal data in accordance with applicable data protection legislation, subject to legal, technical, contractual, or legitimate business requirements.
# 12. DATA SECURITY
The Seller implements reasonable technical, administrative, and organizational measures designed to protect personal data against:
- unauthorized access,
- accidental loss,
- misuse,
- alteration,
- disclosure,
- destruction,
- or unlawful processing.
Such measures may include:
- secure infrastructure,
- encrypted communications,
- access controls,
- authentication systems,
- security monitoring,
- backup systems,
- and restricted administrative access.
Despite reasonable security efforts, no method of electronic transmission, cloud storage, or internet-based system can be guaranteed to be completely secure or error-free.
Accordingly, the Seller cannot guarantee absolute security of data transmitted to, stored on, or processed through the platform.
Users are also responsible for maintaining the security of their accounts, including:
- protecting login credentials,
- using secure passwords,
- preventing unauthorized account access,
- and maintaining the security of devices used to access the platform.
Users should immediately notify the Seller of any suspected unauthorized access, account compromise, or security incident involving their account or personal data.
The Seller may take reasonable actions necessary to investigate, prevent, mitigate, or respond to security incidents, fraud, abuse, or unauthorized platform activity.
# 13. USER RIGHTS
Subject to applicable data protection legislation, users may have certain rights regarding their personal data.
Depending on the applicable laws and the nature of the processing activity, users may have the right to:
- request access to their personal data,
- request correction or updating of inaccurate data,
- request deletion of certain personal data,
- request restriction of processing,
- object to certain processing activities,
- request transfer or portability of personal data where applicable,
- withdraw previously given consent,
- and request information regarding the processing of personal data.
Users may also request information regarding:
- the purposes of processing,
- categories of processed data,
- third-party recipients,
- retention periods,
- and applicable safeguards related to international data transfers.
Certain rights may be limited where processing is necessary for:
- legal compliance,
- contractual obligations,
- security purposes,
- fraud prevention,
- dispute resolution,
- legitimate business interests,
- or other lawful grounds.
Requests regarding personal data may be submitted through the contact information provided in this Privacy Policy.
The Seller may request reasonable verification of identity before responding to privacy-related requests in order to protect user security and prevent unauthorized access to personal data.
# 14. CHILDREN’S PRIVACY
The platform and services are not intended for individuals under the age required by applicable law to independently use digital services or enter into binding agreements.
The Seller does not knowingly collect personal data from children without appropriate legal authorization or parental consent where required by applicable law.
If the Seller becomes aware that personal data has been collected from a child in violation of applicable legislation, reasonable steps may be taken to delete such information or restrict access to the related account.
Parents or legal guardians who believe that a child may have provided personal data through the platform may contact the Seller using the contact information provided in this Privacy Policy.
# 15. CHANGES TO THIS PRIVACY POLICY
The Seller reserves the right to modify, update, or revise this Privacy Policy at any time in order to:
- comply with legal or regulatory requirements,
- reflect changes in platform functionality or services,
- improve transparency,
- adapt to operational or technical developments,
- or address security and privacy practices.
Updated versions of this Privacy Policy may be published on the Website together with an updated “Last Updated” date.
Where required by applicable law, users may be provided with additional notice regarding material changes.
Continued access to or use of the platform after updated versions become effective may constitute acknowledgment of the revised Privacy Policy.
# 16. CONTACT INFORMATION
For any questions, requests, or communications regarding this Privacy Policy or the processing of personal data, users may contact the Seller using the following information:
Noya Plastik Fidancılık İnşaat Sanayi Ticaret Limited Şirketi
Address:
İsmetpaşa Mahallesi İzmit Yolu Üzeri No:40 Merkez/Yalova, Türkiye
Email:
info@noyaflow.com
Website:
https://noyaflow.app