1. Scope and Data Controller
At Treas, we attach great importance to the privacy of our users and the protection of their personal data. This policy explains what information we collect across all the services we provide through www.treas.net.tr and cp.treas.net.tr, the Client Area and our support channels, the purposes for which we use it, how we protect it, and your rights.
Dokunmatik Ekran Teknolojileri Bilişim İnşaat Tic. Ltd. Şti. is the data controller for your personal data. Detailed information under Law No. 6698 on the Protection of Personal Data ("KVKK") is provided in the KVKK Information Notice.
2. Information We Collect
The following information may be collected during registration, ordering, payment, support and communication:
- Account information
- First and last name, email address, phone number, username and customer number; your password is stored only in irreversible (hashed) form.
- Billing information
- Billing address; for individual invoices, your Turkish national identity number; for corporate invoices, the company name, tax office and tax number.
- Order and payment records
- Orders, invoices, payment and refund transactions, Account Balance movements and automatic renewal preferences.
- Security records
- Login history (IP address, browser and device information, approximate location derived from the IP address, and login method), two-step verification and trusted device information, and activity logs for your account and services.
- Linked accounts
- If you choose to sign in with or link a Google, GitHub, Microsoft or Discord account, the identifier and email address of that account; for a Discord connection, your Discord username and ID.
- Support correspondence
- Support requests, messages and attached files; the correspondence records of requests opened through Discord.
- Service data
- Server name, assigned IP addresses, resource and traffic usage measurements, and DDoS attack and firewall logs.
3. How We Use Information
We use the information we collect only for the following purposes:
- to create your account, verify your identity and protect your account,
- to set up, provide, renew and terminate the services you order,
- to collect payments, issue invoices and process refunds,
- to respond to your support requests and send you notifications about the services,
- to prevent abuse, fraud and attacks, and to protect our network and other customers,
- to fulfill our legal obligations, in particular under tax and commercial law and Law No. 5651,
- to improve service quality and the user experience.
We do not sell or rent your personal data, and we do not share it with third parties for advertising purposes.
4. Payment Information
Card payments are taken through the infrastructure of PayTR, a licensed payment institution. The card details you enter in the payment form (card number, expiry date and security code) pass through our systems at the time of payment over an encrypted connection (TLS), solely so that they can be forwarded to the payment institution; the card number, expiry date and security code are not stored by Treas.
If you choose to save your card, it is stored by the payment institution; Treas keeps only the key (token) issued by the payment institution for referring to the saved card, and the masked card details you see in the panel (last four digits, bank) are retrieved from the payment institution when they are displayed. When you pay with a saved card and are asked for the security code, it is likewise forwarded only to the payment institution and is not stored.
5. Sharing of Information
Your personal data is not shared with third parties except where required by law or necessary to provide the service. Within this scope, and limited to the purpose, data may be shared with:
- the payment institution (PayTR) and the e-invoicing and pre-accounting service (Paraşüt),
- email infrastructure (Google), SMS (NetGSM) and optional WhatsApp verification (Meta) services,
- sign-in and account linking services (Google, GitHub, Microsoft, Discord), if you choose to use them,
- data center, connectivity and DDoS protection infrastructure providers,
- our legal and financial advisors, and authorized public institutions and organizations.
Your information is kept confidential unless a duly made official request is received from the competent authorities. Some of these service providers are located outside Turkey; transfers abroad and the recipient groups are explained in detail in the KVKK Information Notice.
6. Data on Your Servers
The content and data you keep on your servers, in your hosting account or on the hardware you host with us belong to you, and you are the data controller for that data. Treas does not inspect this content in the ordinary course of operations; access may take place only to the extent necessary to provide the service, respond to security incidents, act on your request or meet legal obligations.
7. Cookies and Local Storage
Our site uses only the cookies and browser storage needed for the service to work:
- Session and security cookies
- Used to keep you signed in, to protect form submissions against forgery and to complete the sign-in flow. You cannot sign in without these cookies.
- Browser storage
- Your cart contents, theme and display preferences, and the device identifier used for new-device verification are stored in your browser.
No cookies are used for analytics or advertising. The "Sign in with Google" option on the sign-in page and the PayTR payment form on the payment page are loaded by the respective provider; these providers may use their own cookies under their own policies.
You can manage or delete cookies in your browser settings; if you block essential cookies, sign-in and payment may not work.
8. Protection of Data
Your personal data is protected against unauthorized access, loss and misuse with appropriate technical and administrative measures. These include encrypted connections (TLS), storing passwords in irreversible form, two-step verification and passkey options, additional verification for sign-ins from new devices, role-based access authorization and the keeping of access logs.
No system is entirely free of risk; we recommend protecting your account with a strong password and two-step verification.
9. Retention Periods
Your personal data is kept for as long as necessary for the purpose for which it is processed and for the periods required by the applicable legislation. When these periods end, the data is erased, destroyed or anonymized. Data subject to a statutory retention obligation, such as invoice and accounting records, is kept for the duration of that obligation even if you close your account.
10. Your Rights
Your personal data is processed under KVKK (Law No. 6698). You have the rights set out in Article 11 of KVKK, including the right to learn whether your data is processed, to request information, to request the rectification, erasure or destruction of your data, and to object to its processing. Your rights and how to apply are explained in the KVKK Information Notice.
11. Changes
Treas may update this policy. Updates are published on this page and take effect from the date of publication; the "Last updated" date at the top of the page shows the most recent change.
12. Contact
For any questions or requests about our privacy policy, you can reach us at merhaba@treas.net.tr.