Last updated: 2 October 2026

1. Data Controller

MTY Teknoloji ("Restoreks", "we") places great importance on the protection of your personal data. This Privacy Policy explains how personal data collected while using our services is processed.

2. Data Collected

2.1 Account Information

Name, email address, phone number and business information are collected during registration.

2.2 Transaction Data

Business operation data such as orders, payments, and inventory movements are stored on our platform.

2.3 Technical Data

IP address, browser information, device type and session data are collected to improve service quality.

2.4 Cookies

Strictly necessary session cookies are used on our website. Google Analytics cookies are enabled only when you provide explicit consent.

2.5 Mobile Apps

The Restoreks Portal (customer) and Restoreks POS (restaurant staff) mobile apps collect nothing beyond what this policy describes. The Portal app processes your name, email, phone and the delivery address you type into an order; the POS app processes the staff account and order and payment records. Payment card numbers are not entered in either app.

2.6 Device Information

The type of device you sign in from (iPhone or Android) and a random app-specific device ID are recorded to manage your session and the bot check at SMS sign-in (Cloudflare Turnstile). The POS app also records the name given to the device. No advertising ID is collected.

2.7 Notifications

The Portal and POS apps do not send push notifications to your phone and do not ask for notification permission. Notifications only appear in the list inside the app.

2.8 Camera and Other Permissions

Only the POS app uses the camera, to scan the QR code that pairs the Restoreks Edge device on the restaurant network. The image is not saved or sent. POS also uses the local network to find the Edge device and to sync order and payment data inside the restaurant. Neither app accesses your location, microphone, contacts or photo library.

3. Data Usage Purposes

Provision and improvement of our services
Providing customer support
Fulfillment of legal obligations
Security and fraud prevention
Statistical analysis and reporting (anonymized)

4. Data Sharing

Your personal data is shared with third parties only in the following cases:

With PCI DSS compliant payment institutions for payment transactions
With authorized authorities when legally required
With our service providers (server, email, support) — under confidentiality agreement

Your data is never sold to third parties for advertising purposes.

5. Data Security

Your data is protected with security layers such as encryption, access control, audit logging and tenant isolation. Payment card data is processed in payment infrastructure and is not stored in Restoreks.

6. Data Retention Period

Your personal data is retained during the service period and within the scope of legal retention obligations. When the account is closed, data is deleted or anonymized within 30 days. For the steps to delete your account, see the Account and Data Deletion page.

7. Your Rights

Under data protection laws, you have the following rights:

Learning whether your personal data is processed
Requesting information about processing if processed
Requesting correction or deletion of data
Requesting restriction of processing
Data portability right

8. Contact

For questions about our privacy policy, please contact us at kvkk@restoreks.com.