Done: this browser will not share your information with Meta for advertising on our website.

Privacy Policy

Version 2026-10-24 · SHA-256 13e0bec42556894f2098f9c018fa2375a58e5037bbcfc58ca093fa001c056f7f

1. Who we are and what this covers

This Privacy Policy explains how CUMHUR YILMAZ, a sole proprietor trading as NartPay, registered in the Republic of Türkiye (Turkish tax ID 9680884509), with a registered business address at Yenikent Mah., Gizem Sk., B Blok No: 21/3B, İç Kapı No: 33, Derince, Kocaeli, Türkiye ("we") handles personal information in connection with NartPay OS and its website. For account and website information we decide how it is used. For the business records our customers enter about their own customers, vendors and employees ("Customer Data") we act only as the customer's service provider (processor) under the Data Processing Addendum; the customer's own privacy notice applies to those people.

2. What we collect

Account information: name, business e-mail, company name, role, hashed password and two-factor settings. Billing information: plan, billing contact, country and tax details, and payment records such as amount, date and status (card and bank details are collected by Paddle at checkout and are not received or stored by us). Usage and security information: IP address, browser type, device information, sign-in times, audit and security logs. Website statistics: for visits to our public website we count page views and derive the approximate country (and US state) from the IP address on our own server; we keep only daily totals, not the IP address, and we do not count browsers that send Global Privacy Control or Do Not Track. Communications: messages you send us through the contact form, support tickets or e-mail. Customer Data you enter in the Service.

3. How we use it

To create and run your account and provide the Service (performance of our contract with you); to keep it secure and prevent fraud and abuse, to improve the Service using aggregated information and to enforce our terms (our legitimate interests); to send service e-mails (for example sign-in, verification, trial, renewal and billing notices) and the e-mails you ask the Service to send; to answer support requests; to bill your subscription and keep accounting and tax records (legal obligations); and to send product news and offers only if you opted in (consent, which you can withdraw at any time).

4. Advertising measurement (Meta Pixel) and your choice

We do not sell personal information. On the public pages of our website (not inside the Service, and never on invoice links or customer portals) we use the Meta Pixel of Meta Platforms, Inc. to measure and improve our advertising on Facebook and Instagram. When you visit those pages, Meta may receive information about your browser and device, the page you viewed, and whether you completed a sign-up or sent our contact form, and may combine it with other information it holds about you under its own privacy policy. Under California and other US state laws this may be "sharing" for cross-context behavioral advertising. You can opt out at any time with the "Do not share my information" link at the bottom of our website, and we treat a Global Privacy Control or Do Not Track signal from your browser as an opt-out automatically. We do not use Customer Data for advertising or to train artificial intelligence models for third parties.

5. Service providers and disclosures

We disclose personal information only to service providers that help us run the Service, under written contracts that limit their use of it. Our current providers are OVHcloud (server hosting and backups, Canada), Brevo / Sendinblue SAS (e-mail delivery, European Union) and Paddle.com Market Limited and its affiliates (online ordering, payment, sales tax and billing support, United Kingdom and other countries). Paddle acts as the merchant of record for online orders: it receives your name, e-mail, address, tax and payment details directly at checkout and processes them as an independent controller under its own privacy notice at paddle.com/legal/privacy, including for payment processing, fraud prevention, tax compliance and its own legal obligations. We may also disclose information when required by law or legal process, to protect rights, property and safety, to enforce our agreements, or as part of a merger, acquisition or sale of the business, subject to this Policy.

6. International transfers

We are based in the Republic of Türkiye, the Service is hosted in Canada, and our personnel and service providers may access personal information from other countries, including the European Union and the United Kingdom. We protect transferred information with contractual commitments (including standard contractual clauses where required), access controls and the security measures below.

7. Security

Each company's data is isolated in the database with row-level security; connections are encrypted; passwords are hashed; sign-ins, exports and sensitive changes are recorded in audit logs; two-factor sign-in is available; our staff access is limited and logged. No system is perfectly secure; we will notify affected customers of a security incident as required by law and the Data Processing Addendum.

8. Retention

We keep account information while your account is active. After an account is closed we keep data for 60 days for export, then delete it from active systems; backups are overwritten in the normal cycle. Billing records, acceptance records and security logs are kept as long as required or permitted for legal, tax, accounting, dispute and security purposes (for tax records, usually up to 10 years).

9. Your rights

Depending on where you live (for example California and other US states with privacy laws, or the European Economic Area and the United Kingdom), you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, to restrict or object to certain processing, to data portability, to withdraw consent, and to opt out of any sale or sharing (we do not sell; to opt out of sharing for advertising, see section 4). You can see, correct and export most information directly in the Service. To make a request, e-mail us from your account e-mail address; we will verify your request and answer within the time the law requires. An authorized agent may make a request on your behalf with written permission. If we deny a request you may appeal by replying to our answer, and you may complain to your local data protection authority. We will not discriminate against you for using these rights. If your information is part of a customer's Customer Data, we will pass your request to that customer. For information Paddle processes as merchant of record, you may also contact Paddle directly.

10. Marketing e-mails

We send product news only with your consent. You can withdraw consent in Sign-in security in the app, or by replying to any such e-mail. Service and billing e-mails are not marketing and are sent as long as you have an account.

11. Cookies

On our own pages we use cookies that are strictly necessary for sign-in, security (CSRF protection) and remembering your language choice. On the public pages of our website, unless you have opted out (section 4), the Meta Pixel may set or read Meta cookies (such as _fbp) for advertising measurement; opting out stops this on our website and sets a cookie (np_noads) that remembers your choice. We do not use other advertising, analytics or cross-site tracking cookies. When you open the checkout page, Paddle's checkout is loaded from Paddle's servers and Paddle may set its own cookies or similar technologies that are necessary to process the payment, prevent fraud and remember your checkout session, as described in Paddle's privacy notice.

12. Children

The Service is for businesses and is not directed at children under 16. We do not knowingly collect their personal information; if we learn that we have, we will delete it.

13. Changes

We will post updates here with a new version date and tell you in the Service and by e-mail about material changes.

14. Contact

CUMHUR YILMAZ (NartPay) · Yenikent Mah., Gizem Sk., B Blok No: 21/3B, İç Kapı No: 33, Derince, Kocaeli, Türkiye · Privacy requests: info@nartpayglobal.com