Personal Data Protection Disclosure

1. Data controller

Within this disclosure, the 'Data Controller' is Bilgetek, developer and provider of BulkPro. Contact: privacy@bilgetek.com (Istanbul, Turkey).

2. Categories of personal data processed

Version 0.1.46 sends no license-validation or usage telemetry. The following data may be processed when you contact us or use the website:

• If you use the contact form: your name, email and message are processed to answer your request.
• When you connect to the website, installer or update servers, the providers may process your IP address and standard connection information.

3. Processing purposes

• Effective distribution of security updates.
• Responding to user requests and applications.

4. Legal basis

Processing is carried out under KVKK art.5/2-(c) necessity for performance of a contract (services provided on request), art.5/2-(f) legitimate interest not harming the data subject's fundamental rights (security), and explicit consent where required (contact form content).

5. Transfer and cross-border transfer

Your personal data is not transferred to third parties for marketing or sales. Limited data is shared only with sub-processors (data processors) that are necessary to deliver the service:

• Cloudflare: hosting, CDN, email routing and form security (Turnstile).
• Resend: delivery of contact-form messages.
• GitHub: hosting of installer releases.

6. Retention period

Version 0.1.46 sends no license-validation or heartbeat data. Any records retained from earlier versions remain subject to their existing retention periods and legal obligations. Contact-form correspondence is kept for at most 3 years after the request is resolved, then deleted or anonymized.

7. Your rights under KVKK Article 11

• Learn whether personal data is being processed.
• If so, request information about it.
• Learn the processing purpose and whether it's used in line with that purpose.
• Know the third parties to whom data is transferred domestically/abroad.
• Request correction if processing is incomplete/incorrect.
• Request deletion or destruction.
• Request that corrections/deletions/destructions be notified to third parties to whom data was transferred.
• Object to results arising from analysis through automated systems.
• Request compensation for damage caused by processing in violation of the law.

8. How to apply

Send your written application for the rights above to privacy@bilgetek.com. We respond within 30 days at the latest. Under the Communiqué on the Procedures and Principles for Application to the Data Controller, written applications may require identity-verifying documents.