Privacy Policy
Last updated: May 2026.
Who we are
BRNVLY Yazılım Ticaret Anonim Şirketi (operating under the brand "Clastrum"), a joint-stock company (Anonim Şirket) incorporated in Türkiye under Turkish Commercial Code No. 6102. Registered office: Hasanpaşa Mah. Nabizade Sk. B Blok No: 82, Interior No: 1, Kadıköy / İstanbul. MERSİS: 0187176676500001 · Istanbul Trade Registry No: 1137479 · Tax No: 1871766765 (Kadıköy V.D.). For privacy and data-protection inquiries, contact our Data Protection Officer at dpo@clastrum.com. General contact: hello@clastrum.com.
What we collect
When you submit our brief form we collect: company, contact name, email, phone (optional), role, your problem description, data description, timeline, and budget. Server logs may retain IP address and user-agent for up to 30 days for abuse prevention and security monitoring.
Why we collect it
To respond to your inquiry, prepare a discovery call, and (if we work together) deliver the engagement. Lawful basis: contract necessity (preparing to enter into a contract) and your consent for marketing-adjacent communications.
Where we store it
In Supabase, our managed Postgres provider, hosted in the EU. Sub-processors: Resend (transactional email, US), Vercel (hosting, US/EU). All transfers outside Türkiye are protected by standard contractual clauses or equivalent safeguards. We do not sell your data and we do not use it to train AI models.
How long we keep it
Inquiries are retained for 24 months from the date of last contact, after which they are deleted or anonymised. You can request deletion at any time via dpo@clastrum.com.
Your rights
Under GDPR (where applicable) and KVKK you can request access, rectification, deletion, portability, restriction, and objection. To exercise any of these rights, email dpo@clastrum.com. We respond within 30 days. You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) at www.kvkk.gov.tr.
Changes
Material changes to this policy will be announced on this page with an updated "Last updated" date. Continued use of the site after a change constitutes acceptance of the revised policy.