Version History
Disclosure Text on the Processing of Personal Data
In Accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data
Date: March 8, 2026
Data Controller: Pledle
Contact: privacy@pledle.com
1. Identity of the Data Controller
| Field | Information |
|---|---|
| Trade Name | Pledle |
| Website | https://pledle.com |
| privacy@pledle.com | |
| Data Protection Contact Person | dpo@pledle.com |
As Pledle, we act as the data controller within the scope of the Personal Data Protection Law No. 6698 ("KVKK"). This Disclosure Text has been prepared to explain for what purposes, on what legal grounds, and by what methods we process your personal data, to whom your data can be transferred, and your rights under the KVKK.
2. Processed Personal Data and Purposes of Processing
2.1 Identity and Contact Data
Processed data: Name, surname, e-mail address
Purposes of processing:
- Creation and management of user account
- Providing identity verification and account security
- Offering platform services
- Transmission of invoice and subscription notifications
- Fulfillment of legal obligations
Legal basis: KVKK Art. 5/2-c (establishment and performance of the contract), Art. 5/2-a (legal obligation)
2.2 Customer Transaction Data
Processed data: Subscription plan, billing period, payment date and amount, transaction reference number
Purposes of processing:
- Management of subscription and payment processes
- Issuance of invoices and keeping accounting records
- Fulfillment of tax obligations
- Resolution of potential payment disputes
Legal basis: KVKK Art. 5/2-c (performance of the contract), Art. 5/2-a (legal obligation)
Note: Credit card number, CVV, and bank account information are not processed by Pledle. These data are processed directly by Lemon Squeezy within the framework of PCI DSS standards.
2.3 User Content Data
Processed data: Book title, author name, cover image, reading progress, reading status, favorite work information added to the library
Purposes of processing:
- Creation and management of a personal reading library
- Calculation of reading statistics
- Offering the core service of the Platform
Legal basis: KVKK Art. 5/2-c (performance of the contract)
2.4 AI Chat Data
Processed data: AI chat messages, message timestamps, book information associated with the chat
Purposes of processing:
- Offering AI-supported chat service
- Presenting chat history to the user
- Transmission of the last 10 messages to the OpenAI API for contextual response generation
Legal basis: KVKK Art. 5/1 (explicit consent)
Important Information: When you use the AI chat feature, your message contents and book context information are transmitted to OpenAI's servers. This process is based solely on the explicit consent of the data subject. You can withdraw your consent at any time; in this case, you will not be able to use the AI chat feature.
2.5 Transaction Security Data
Processed data: IP address, browser type and version, operating system, login date and time, session durations, error logs
Purposes of processing:
- Ensuring platform security
- Detection and prevention of unauthorized access
- Resolution of technical errors and performance issues
- Prevention of fraud and misuse
Legal basis: KVKK Art. 5/2-f (legitimate interest)
2.6 Marketing Data
Processed data: E-mail address, platform usage preferences, communication approval status
Purposes of processing:
- Transmission of new feature and update announcements
- Sending campaign and discount notifications
- Offering personalized content recommendations
Legal basis: KVKK Art. 5/1 (explicit consent)
Giving consent to marketing communications is optional. You can withdraw your consent at any time. Withdrawing consent does not affect the sending of transactional notifications (invoice, password reset, etc.).
3. Method of Collecting Personal Data
Your personal data is collected by the following methods:
| Method | Types of Data Collected |
|---|---|
| Account creation form | Identity and contact data |
| Platform usage (automatic) | Transaction security data, technical data |
| Adding and updating books | User content data |
| AI chat interface | AI chat data |
| Payment flow (Lemon Squeezy) | Customer transaction data |
| Cookies and local storage | Technical and preference data |
4. Transfer of Personal Data
4.1 Domestic Transfer
Your personal data is not transferred to any third party within the country.
4.2 International Transfer
Within the scope of Article 9 of the KVKK, international transfer is carried out to the following data processors:
| Recipient | Country | Processed Data | Purpose of Transfer | Legal Basis |
|---|---|---|---|---|
| Supabase Inc. | USA | Account, book, chat data | Database and identity verification service | Explicit consent / SCCs |
| OpenAI LLC | USA | Chat messages, book context | AI response generation | Explicit consent |
| Lemon Squeezy | USA | Subscription and transaction data | Payment infrastructure | Performance of contract |
| Resend Inc. | USA | E-mail address | Sending of system e-mails | Performance of contract |
International transfers are made by obtaining the explicit consent of the data subject, or to countries determined by the Personal Data Protection Board to provide an adequate level of protection, or to data controllers in countries where adequate protection is committed.
5. Storage Periods of Personal Data
| Data Category | Storage Period | Basis |
|---|---|---|
| Identity and contact data | As long as the account is active + 30 days | Contract |
| User content data | As long as the account is active + 30 days | Contract |
| AI chat data | Until the user deletes or the account is deleted | Explicit consent |
| Customer transaction / invoice data | 10 years | Tax Procedure Law Art. 253 |
| Transaction security data | 90 days | Legitimate interest |
| Marketing data | Until consent is withdrawn | Explicit consent |
| Support correspondence | 3 years | Legitimate interest |
Following the expiration of storage periods, your personal data is deleted, destroyed, or anonymized in accordance with Article 7 of the KVKK and the Regulation on Deletion, Destruction or Anonymization of Personal Data.
6. Your Rights Under KVKK
According to Article 11 of the KVKK, you have the following rights:
| Right | Description |
|---|---|
| Obtaining information | To learn whether personal data is processed |
| Access | To request information if processed |
| Correction | To request correction of incorrect or incomplete data |
| Deletion / Destruction | To request deletion if processing conditions disappear |
| Notification | To request notification of correction or deletion to third parties |
| Objection | To object to results emerging against you through automated systems |
| Remedy of damages | To demand compensation for damages due to unlawful processing |
| Transfer information | To learn the third parties to whom your data was transferred |
| Withdrawal of consent | To withdraw your consent in consent-based processing |
7. How to Exercise Your Rights?
7.1 Application Method
To exercise your rights under Article 11 of the KVKK, you can apply using one of the following methods:
Via e-mail:
📧 privacy@pledle.com
Subject: "KVKK Right Use Request"
Information required in the application:
- Name, surname
- Account e-mail address
- Subject of the request (which right you want to use)
- Explanation and documents regarding the request (if any)
- Information verifying your identity
7.2 Response Period
Your application will be concluded as soon as possible and in any case within 30 days according to its nature, and you will be notified in writing or electronically. This period may be extended for another 30 days due to the complexity of the request; in this case, information will be provided.
If the application is rejected, an incomplete or insufficient response is given, or no response is given in time, you reserve the right to file a complaint with the Personal Data Protection Board.
7.3 Application to the KVKK Board
Personal Data Protection Authority
🌐 kvkk.gov.tr
📧 kvkk@hs01.kep.tr
📍 Nasuh Akar Mahallesi, Ziyabey Caddesi No:18, 06520 Balgat / Ankara
8. Withdrawing Your Consent
For data processed based on consent, you can withdraw your consent in the following ways:
| Data Processing | Method of Withdrawing Consent |
|---|---|
| AI chat data | Written application to privacy@pledle.com or stop using the AI feature |
| Marketing e-mails | "Unsubscribe" link at the bottom of the e-mail or Settings → Notifications |
| Analytical cookies | Update from the cookie preferences panel |
Withdrawing your consent does not make the transactions carried out until the withdrawal date unlawful.
9. Automated Decision Making
Pledle does not process your personal data solely by automated means to take a decision that produces legal consequences concerning you or significantly affects you.
10. Updating the Disclosure Text
This Disclosure Text may be updated in line with changes in KVKK and relevant legislation, new data processing activities, or Board decisions. Updates are announced on the Platform and via e-mail. You can always access the current text at pledle.com/kvkk.
This Disclosure Text has been prepared in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.
Pledle — Designed for reading. Built for trust.