Privacy Notice and Data Protection Policy
Last updated: 30 August 2026
This page explains what personal data seferiai.com processes, why, and for how long. It is written to meet the disclosure duty in Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK).
1. Data controller
Seferi is a logistics operations platform built by Sirius AI Tech. The legal entity acting as data controller for your personal data is identified below.
To be completed before publishing: full registered trade name, MERSİS number, trade registry number, a service address for legal notices, and the VERBİS registration number if the company is registered.
- E-mail: info@seferiai.com
- Phone: +90 (212) 963-2273
- Web: seferiai.com
2. Personal data we process
There are no accounts on this site and you do not need to give any personal data to browse it. Data is processed in two situations only: when you submit the demo request form, and when your visit is counted for statistics.
| Data | Where it comes from | Required |
|---|---|---|
| Full name | Demo request form | Required |
| E-mail address | Demo request form | Required |
| Phone number | Demo request form | Optional |
| Fleet size | Demo request form | Optional |
| Your message | Demo request form | Optional |
| IP address | Read by the server when the form is submitted | Automatic |
| Browsing statistics | Google Analytics cookies | Automatic |
Your IP address is read only on form submissions and only to prevent abuse: it is held in a counter that blocks more than five submissions from the same address within ten minutes. That counter lives in memory, is never written to a database, and is discarded when the ten-minute window closes.
The form contains one hidden field (a "honeypot"). It is hidden in a way only automated bots will fill in; a real user cannot complete it and its contents are never stored.
3. Purposes and legal grounds
| Purpose | Data used | Legal ground (KVKK Art. 5) |
|---|---|---|
| Responding to your demo request and arranging a call | Name, e-mail, phone, fleet size, message | Necessary for entering into a contract, and legitimate interest (Art. 5/2-c and 5/2-f) |
| Preventing abuse and spam through the form | IP address | Legitimate interest (Art. 5/2-f) |
| Measuring and improving the site | Browsing statistics | Explicit consent (Art. 5/1) |
Nothing beyond what is needed to answer your request is added to a marketing list, and we do not send commercial electronic messages without your consent.
4. Who we share data with
We do not sell personal data. The following providers are involved in running the service:
| Party | Purpose | Where processed |
|---|---|---|
| Our e-mail (SMTP) provider | Delivering your form submission to us | The provider's servers |
| Google Analytics | Visit statistics | Outside Türkiye, including the USA |
| Our hosting provider | Serving the site and server logs | The provider's servers |
To be confirmed before publishing: the trade names of the SMTP and hosting providers and the countries their servers sit in. Where data leaves Türkiye, the mechanism relied on under KVKK Art. 9 (explicit consent, standard contract, or adequacy decision) must be stated.
5. Retention periods
- Demo request contents: at most 2 years after the request is closed; if a commercial relationship begins, the statutory retention periods apply instead.
- IP address (rate-limit counter): 10 minutes. The record is discarded when the window closes and is never retained.
- Google Analytics data: per Google's own retention settings; cookie lifetimes are listed in the Cookie Policy.
The 2-year period is written as an example and must be aligned with the company's personal data retention and destruction policy.
6. Security measures
- The site and all form submissions are transmitted over HTTPS.
- Form input is validated for length and format on the server and escaped before it is written into an e-mail body.
- Form submissions are rate-limited per IP address.
- Request contents land in a corporate mailbox accessible only to authorised team members.
7. Your rights under KVKK
Under Article 11 of the Law you may ask us to:
- Tell you whether your personal data is being processed
- Provide information about that processing
- Explain the purpose and whether the data is used in line with it
- Identify the third parties, in Türkiye or abroad, the data is transferred to
- Correct data that is incomplete or inaccurate
- Erase or destroy the data within the conditions set by the Law
- Notify third parties of any correction, erasure or destruction
- Object to a result reached solely through automated analysis that works against you
- Compensate damage arising from unlawful processing
8. How to apply
Send your request to info@seferiai.com. We answer within 30 days at the latest, as required by the Communiqué on the Procedures and Principles of Application to the Data Controller. Where we cannot verify your identity we may ask for further information.
The Communiqué also requires a service address for written applications and a registered electronic mail (KEP) address; both must be added.
9. Changes
We may update this notice when our services or the law change. The current version is always published on this page and the date above is updated.
This is a draft written from the data the site actually processes. Have it reviewed by the company's own legal counsel and fill in the marked items before publishing.