Version: 2026-10-en-v1 · Last updated: 3 October 2026 · Türkçe · KVKK notice (Turkish residents)
Draft: this text is awaiting legal review.
Linkyon is a B2B platform where textile companies find each other, share fabric information, request samples and get calculation support from an AI assistant. This notice explains how personal data is processed when you use the app, the website and the assistant on WhatsApp. It follows Articles 13 and 14 of the EU General Data Protection Regulation (GDPR) and the UK GDPR.
1. Who we are
The controller is Takyon Ai Teknoloji Sanayi ve Ticaret A.Ş., a company established in Türkiye, which operates the platform under the name Linkyon.
Address: Bağlar Mah. Mimar Sinan Cad. No: 3/C, Güneşli, Bağcılar / İstanbul, Türkiye.
Privacy contact: [email protected]
2. What we collect
- Account data: first and last name, phone number, job title, profile photo.
- Company data: company name, VAT / tax number, address, contact details, logo and company photos.
- Product data: fabric and yarn details, composition, certificates and test reports, photos and videos, and prices (a price is shown only to your own company).
- Communications: messages, sample and quotation requests, posts and comments; what you write or say to the assistant, and what you send to it on WhatsApp (text and images).
- Feedback: text, screenshots and voice notes you send through "Is something wrong?", and short survey answers.
- Usage and security records: session data, the days you use the app, products you view, error and security logs.
We do not intend to collect special categories of data (Article 9). Please do not write such data to the assistant or in messages. Most of this data comes from you directly. Where a colleague adds you to a company team, see section 14.
3. Why we use it, and on what legal basis
- Creating your account, verifying your phone number, providing the service (company pages, messages, sample requests, assistant answers, label and document reading, speech-to-text and text-to-speech): performance of a contract, Art. 6(1)(b).
- Invoicing and tax records: legal obligation, Art. 6(1)(c).
- Security, fraud prevention, fixing errors, improving the service (feedback, surveys, content moderation): legitimate interests, Art. 6(1)(f).
- Optional items only (for example voice feedback and optional notifications): consent, Art. 6(1)(a). You can withdraw consent at any time; this does not affect processing before the withdrawal.
4. Our legitimate interests
Our legitimate interests are keeping the platform secure and improving it. We balance them against your rights by processing only company-usage data for these purposes. We do not use advertising or profiling.
5. Who receives your data
- Other users of the platform: your company page and products, and the messages and requests you send.
- Service providers acting as processors (see the table below).
- Public authorities, when the law requires it.
We do not sell your data and we do not use it for advertising.
| Provider | Purpose | Data |
|---|---|---|
| Render (USA) | Server and database hosting | All account, company, product and message data |
| Anthropic (USA) | AI assistant, label and document reading | Text and images you send to the assistant; the company and product details needed to answer |
| Google Cloud (USA) | Reading assistant answers aloud | The answer text being read |
| Cloudflare (USA) | Photo, video and file storage; website delivery; speech-to-text; database backup (90 days) | Photos, videos, uploaded files, voice recordings, backups, connection logs |
| Meta Platforms (WhatsApp Business) | Delivering WhatsApp messages | Phone number, WhatsApp message content |
| İleti Merkezi (Türkiye) | SMS verification code (Turkish numbers only; for foreign numbers the code is sent through WhatsApp) | Phone number, verification message |
| European Commission VIES (EU) | Checking an EU VAT number | Company VAT number only |
6. International transfers
Your data is processed in Türkiye and in the United States. For our US providers the transfer relies on the EU–US Data Privacy Framework (Render, Cloudflare) and/or the EU Standard Contractual Clauses in their data processing agreements (Anthropic, Vercel, WhatsApp, and Cloudflare as a fallback). There is currently no EU adequacy decision for Türkiye; data you give us directly is processed in Türkiye by us. You can ask for a copy of the safeguards at [email protected].
7. How long we keep it
- Account data: as long as your account is open.
- When you delete your account (About → Delete my account): your name, phone number and photo are deleted immediately and the account is anonymised as "Deleted user". Messages you sent remain visible to the other party; collaboration and sample records remain in anonymised form. If no other user remains in the company, the company page and products are removed.
- Invoice and accounting records: for the period required by Turkish tax law (generally five years).
8. Your rights
You have the right of access, rectification, erasure, restriction, objection and data portability, and the right to withdraw consent. Write to [email protected] from, or naming, your registered phone number. We answer free of charge within 30 days.
9. Complaints
You may complain to the data protection authority of your country of residence (EU), or to the Information Commissioner's Office (ICO) if you are in the United Kingdom.
10. Is providing data required?
We cannot open an account without a name and a phone number, because they are needed to provide the contract. Everything else is optional.
11. Automated decisions
The AI assistant produces answers and suggestions. We do not take decisions with legal or similarly significant effects about you by automated means, and we do not profile you. Posts in the public feed pass an automated content check that keeps the feed on textile topics; if a post is hidden, you can contact us and a person will review it.
12. What we store on your device
On the web we store a session token and your interface preferences. The session token lasts only for the browser session unless you tick "Keep me signed in on this device". We use no advertising, analytics or third-party tracking cookies, so there is no cookie banner.
13. Security
Sessions are protected with signed tokens, phone numbers are verified, requests from WhatsApp are signature-checked, and data travels over HTTPS.
14. If a colleague added you
If a team member invited you to a company on Linkyon, we hold your name and phone number as provided by that colleague. The source is the person who invited you. You have all the rights above, and this notice is linked in the invitation message.
15. Changes
When this notice changes we publish it here with a new version and date. For material changes the app asks for your confirmation again.
Under Article 13(3) we will inform you before using your data for a new purpose.