Privacy Notice and Data Protection Policy
Last updated: 2 September 2026
This page explains what personal data seferiai.com processes, why, and for how long. It is written to meet the disclosure duty in Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK).
1. Data controller
Seferi is a logistics operations platform built by Sirius AI Tech. The legal entity acting as data controller for your personal data is identified below.
The data controller is Sirius AI Tech, the company behind the Seferi brand (Barbaros Hayrettin Paşa Mah., 1993 Sk., Ferah Residence No:22/A D:121, Istanbul, 34522, Türkiye).
- E-mail: info@seferiai.com
- Phone: +90 212 963 22 73
- Web: seferiai.com
2. Personal data we process
There are no accounts on this site and you do not need to give any personal data to browse it. Data is processed in two situations only: when you submit the demo request form, and when your visit is counted for statistics.
| Data | Where it comes from | Required |
|---|---|---|
| Full name | Demo request form | Required |
| E-mail address | Demo request form | Required |
| Phone number | Demo request form | Optional |
| Fleet size | Demo request form | Optional |
| Your message | Demo request form | Optional |
| IP address | Read by the server when the form is submitted | Automatic |
| Browsing statistics | Google Analytics cookies | Automatic |
Your IP address is read only on form submissions and only to prevent abuse: it is held in a counter that blocks more than five submissions from the same address within ten minutes. That counter lives in memory, is never written to a database, and is discarded when the ten-minute window closes.
The form contains one hidden field (a "honeypot"). It is hidden in a way only automated bots will fill in; a real user cannot complete it and its contents are never stored.
3. Purposes and legal grounds
| Purpose | Data used | Legal ground (KVKK Art. 5) |
|---|---|---|
| Responding to your demo request and arranging a call | Name, e-mail, phone, fleet size, message | Necessary for entering into a contract, and legitimate interest (Art. 5/2-c and 5/2-f) |
| Preventing abuse and spam through the form | IP address | Legitimate interest (Art. 5/2-f) |
| Measuring and improving the site | Browsing statistics | Explicit consent (Art. 5/1) |
Nothing beyond what is needed to answer your request is added to a marketing list, and we do not send commercial electronic messages without your consent.
4. Who we share data with
We do not sell personal data. The following providers are involved in running the service:
| Party | Purpose | Where processed |
|---|---|---|
| Our e-mail (SMTP) provider | Delivering your form submission to us | The provider's servers |
| Google Analytics | Visit statistics | Outside Türkiye, including the USA |
| PostHog | Product analytics: which sections get used, funnel measurement | Outside Türkiye (USA) |
| Our hosting provider | Serving the site and server logs | The provider's servers |
Google Analytics is loaded only with your explicit consent. Without that consent PostHog runs in cookieless mode: no cookie or local storage entry is written to your browser and no profile identifying you is created; only which page was viewed is counted in aggregate. If you do consent, PostHog switches to its full, cookie-based mode. The visit and usage statistics collected this way are processed on the providers' servers, including outside Türkiye (USA); that transfer is subject to the procedures set out in Article 9 of the KVKK. E-mail delivery and the site infrastructure are processed under the security measures of the providers listed above.
5. Retention periods
- Demo request contents: at most 2 years after the request is closed; if a commercial relationship begins, the statutory retention periods apply instead.
- IP address (rate-limit counter): 10 minutes. The record is discarded when the window closes and is never retained.
- Google Analytics data: per Google's own retention settings; cookie lifetimes are listed in the Cookie Policy.
6. Security measures
- The site and all form submissions are transmitted over HTTPS.
- Form input is validated for length and format on the server and escaped before it is written into an e-mail body.
- Form submissions are rate-limited per IP address.
- Request contents land in a corporate mailbox accessible only to authorised team members.
7. Your rights under KVKK
Under Article 11 of the Law you may ask us to:
- Tell you whether your personal data is being processed
- Provide information about that processing
- Explain the purpose and whether the data is used in line with it
- Identify the third parties, in Türkiye or abroad, the data is transferred to
- Correct data that is incomplete or inaccurate
- Erase or destroy the data within the conditions set by the Law
- Notify third parties of any correction, erasure or destruction
- Object to a result reached solely through automated analysis that works against you
- Compensate damage arising from unlawful processing
8. How to apply
Send your request to info@seferiai.com. We answer within 30 days at the latest, as required by the Communiqué on the Procedures and Principles of Application to the Data Controller. Where we cannot verify your identity we may ask for further information.
9. Changes
We may update this notice when our services or the law change. The current version is always published on this page and the date above is updated.