This is an English translation for convenience. The Turkish version is the binding one.
This notice is prepared under Article 10 of Turkey’s Personal Data Protection Law No. 6698 (KVKK) and covers the Salonum mobile app. Salonum is a business app that wedding and event venues use to manage events, payments, staff and bookkeeping.
Data controller and processor
The business’s records
The business (venue) using Salonum is the data controller for the customer, event, staff and supplier records it enters. Ayaz Interactive processes these records only on the business’s behalf and instructions, to provide the service, and is the data processor for them. If you are a customer of a venue and have a request about your records, contact that venue first; if you write to us, we forward your request to the business.
App accounts
For the account and technical data of users who sign in to the app, the data controller is Ayberk Eser (Salonum is a product of Ayaz Interactive). Contact: info@ayazint.dev.
What we process
Your account
Your name, email address, password (stored only as an irreversible hash), your role in the business and whether your account is active. Accounts are created by invitation from the business’s manager.
Records the business enters
- Customers: first and last name, phone, email, address, notes, when the privacy notice was shown and whether they consented to marketing messages.
- Events: date, time, hall, guest count, items, payment plan, collections, receipts, tasks and notes.
- Staff: name, phone, email, position, daily wage, shifts and leave.
- Suppliers and vendors: name, phone, email, jobs and payments.
Change history
Who changed which record, when and how is logged for security and accountability.
Notifications
Your device’s notification token and a record of notifications sent to you, so we can send reminders such as payment days, expiring holds and tasks.
What stays on your device
The app lock (fingerprint or face unlock) uses your phone’s own security feature; your biometric data never reaches the app or us. Files you pick for import and the receipt and statement PDFs you share are prepared on your device.
The app does not collect an advertising ID, location, usage statistics or crash reports.
Why we process it and legal basis
- Opening your account, storing and showing the business’s records, sending notifications: performance of a contract (KVKK Art. 5/2-c).
- Keeping invoice, receipt and accounting records for the period required by law: legal obligation (KVKK Art. 5/2-ç).
- Preventing unauthorized access, logging changes, keeping the service secure and running: legitimate interest (KVKK Art. 5/2-f).
A business may send marketing messages to a customer only with that customer’s explicit consent; without a consent record the marketing button in the app is disabled. Data is not used for advertising and is not sold.
Who receives it
The database and authentication are hosted on Supabase infrastructure on servers in the European Union. Notifications are delivered to your device through Google’s Firebase Cloud Messaging, which uses Google’s global infrastructure and sees only the notification text and the device token. These transfers are made in line with Article 9 of KVKK.
A business’s records can be seen only by that business’s users, to the extent their roles allow. Data is not shared with anyone else unless the law requires it.
How long we keep it
- Your account data is kept while your account exists. A deactivated account can no longer sign in; on request, the account is deleted.
- The business’s records are kept while the business uses Salonum, and deleted when the business stops using the service and asks for deletion.
- Accounting, collection and receipt records are kept for the period required by tax and commercial law; during that period they cannot be changed or deleted.
- The business can anonymize a customer’s record in the app: name, phone, email, address and notes are permanently deleted or masked; only financial records that must be kept by law remain, in a form that cannot be linked to the person.
Your rights
Under Article 11 of KVKK you have the right to learn whether your data is processed, to request information if it is, to learn the purpose of processing and whether it is used accordingly, to know who it is transferred to, to request correction if it is incomplete or wrong, to request deletion or destruction and that these be notified to recipients, to object to a result against you from automated analysis, and to claim compensation for damage from unlawful processing.
You can send requests about your app account to info@ayazint.dev; they are answered within 30 days. If you are a venue’s customer or staff member, you can apply to that business; we forward requests we receive to the relevant business.
Changes
If this notice changes, the current version is published on this page and the date at the top is updated.