Privacy Policy

Data Controller

For the purposes of this privacy policy, the data controller of your personal data is Clockwork Bilgi Teknolojileri Anonim Şirketi. DealerBot is a product operated by this company.

Legal name

Clockwork Bilgi Teknolojileri Anonim Şirketi

Registered address

Maslak Mah. AOS 55. Sok. 42 Maslak A Blok No: 2 İç Kapı No: 208, Sarıyer - İstanbul, 34485

MERSIS No

0211070813900001

Trade registry no

591523-0 (İstanbul Ticaret Sicili Müdürlüğü)

Tax ID

2110708139

1. Introduction

As DealerBot ("we", "platform"), we value the security of your personal data. This privacy policy explains how data collected through www.dealerbot.com.tr and our related services is processed. By using the service, you are deemed to have accepted this policy.

2. Data We Collect

We may collect data in the following categories:

• Account information: Email address, first name, last name, company/organization information (for registration and login).
• Meta (Facebook/Instagram) integration: When you use Facebook login or page/account connection, data within the scope of authorization (e.g., page access, ad management). This data is shared with Meta and is subject to Meta's data policy.
• Usage data: Session durations, page views, feature usage (for service improvement and security purposes).
• Technical data: IP address, browser type, device information (for security and troubleshooting purposes).

3. Purposes of Data Use

• Account creation, authentication, and account management
• Providing Meta ad and content management features
• Support, security, and fraud prevention
• Service improvement and analytics
• Fulfilling legal obligations

4. Data Sharing

We only share your data in the following cases: (a) within the scope of Meta integration (Facebook Login, ad APIs); (b) legal obligation or court order; (c) with our service providers (hosting, email) for contractual reasons. (d) if you consent to cookies, with Meta Platforms and Google for ad measurement and analytics: the address of the pages you visit, the application completion event, cookie identifiers, IP address and browser information. This data may be transferred abroad. We do not send your form fields (name, email, phone) to Meta. We record your cookie choices using the Efilli service. We do not sell your data to third parties.

Data Received from Google Services

If a dealer administrator connects their Google account to DealerBot, we access Google data only within the permissions they grant and only for the purposes below. Access is read-only; we do not publish, change or delete anything in your Google account.

• Google Analytics (GA4): a web traffic summary of the property you select (sessions, users, page views, channel breakdown) is shown in the dashboard and in your monthly report.
• YouTube: public statistics and the latest videos of the channel you select are shown in the dashboard. We use YouTube API Services.
• Google Ads: the campaign list and daily performance metrics (spend, clicks, impressions, conversions) of the ad account you select are shown in the dashboard.
• Google Business Profile: the list of your business locations is shown so you can select your location.

We do not store Google Analytics or YouTube data; it is read live from Google each time it is displayed. Google Ads campaign and metric data is kept for reporting for at most 13 months and then deleted automatically. While you are connected we keep your Google account email address and the IDs of the property, channel, ad account and location you selected. We do not use Google data for advertising, do not sell it and do not use it to train AI models.

We do not sell or transfer Google user data, raw or aggregated/anonymized, to third parties, and we never give it to advertisers or data brokers. It reaches other parties only in these cases: infrastructure providers that operate the service on our behalf (hosting, database, and email delivery of reports you schedule), authorized users in your organization, report recipients you choose, and when required by law. We do not combine Google data with other customers' data and do not create aggregated or anonymized datasets from it.

Data is encrypted in transit with TLS and stored on infrastructure that encrypts it at rest. Google access and refresh tokens are additionally encrypted at the application level and are never sent to the browser. Only server-side code can access the tables holding Google data; users see it through screens protected by role-based access control.

DealerBot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google API Services User Data Policy

When we show YouTube data, the YouTube Terms of Service and the Google Privacy Policy also apply: YouTube Terms of Service · Google Privacy Policy

You can disconnect at any time from the Google Connection page in DealerBot or remove access from your Google account settings. When you disconnect in DealerBot, the tokens are revoked, your Google account identity and selected resources are removed, and stored Google Ads data is deleted immediately. If you only remove access from your Google account, no new data is fetched; you can delete the remaining data by disconnecting in DealerBot or by requesting it on our data deletion page. Google account third-party access

5. Retention Period

Your account data is retained as long as your account is active. After your account is deleted or your data deletion request is processed, data is deleted or anonymized except for legal retention periods.

6. Cookies and Similar Technologies

We use necessary cookies for sessions and security. We use ad measurement and analytics cookies (Meta Pixel _fbp, _fbc and tags added through Google Tag Manager) only with your consent; you can change your choice at any time with the "Cookie preferences" button on the page. On demo requests, we store the campaign tags (UTM) in the link and the page you applied from with your request to understand the ad source; no cookies are used for this.

7. Your Rights (KVKK and General)

You have the right to request access, correction, deletion, and restriction of processing of your personal data. How to submit your data deletion request is explained on our Data Deletion page. You can apply to the Personal Data Protection Authority for your complaints.

8. Security

We protect your data with appropriate technical and administrative measures. Communication and access information is processed through encrypted connections (HTTPS) and secure servers.

9. Changes

When this policy is updated, we change the "Last updated" date on this page. Significant changes may be announced via email or in-app notification.

10. Contact

For questions about privacy: info@dealerbot.com.tr