Privacy notice for merchants in Türkiye (KVKK disclosure)

Prepared with reference to Law No. 6698 on the Protection of Personal Data (KVKK), Article 10 disclosure duties. Language of this notice: English (international App Store standard). · Effective: 18 July 2026

1. Data controller

For CopyPilot AI, the data controller is Fixiby Software Technologies.
Email (privacy, support, requests): info@fixiby.com
Websites: fixiby.com · fixiby.vercel.app

2. Personal data processed

The service is B2B. Categories that may be processed include:

• Merchant / shop identifiers obtained via Shopify (domain, shop ID, subscription metadata)
• Limited technical security logs (IP, timestamps)
• Product content fields (commercial content). Merchants should avoid unnecessary personal data in product descriptions

CopyPilot AI does not request Shopify customer or order scopes and does not intentionally collect end-customer PII.

3. Purposes

• Delivering AI-assisted SEO / sales copy features
• Subscription, credit, and Shopify Billing operations
• Security, diagnostics, and compliance (including Shopify mandatory webhooks)

4. Legal grounds (KVKK Arts. 5–6)

• Necessary for the establishment or performance of a contract
• Necessary for compliance with a legal obligation
• Necessary for the legitimate interests of the controller, provided fundamental rights are not harmed
• Explicit consent — only when separately required

5. Transfers

Data may be transferred to Shopify and infrastructure processors (including hosting outside Türkiye) in accordance with KVKK Arts. 8–9 and with appropriate safeguards where required.

6. Collection method

Data is collected electronically via Shopify Admin APIs, the embedded Admin UI, Shopify Billing, and server logs.

7. Retention

Data is retained for the duration necessary for the stated purposes and applicable limitation periods. After uninstall, Shopify’s shop/redact webhook triggers deletion or anonymization of shop-linked app data, except where law requires retention.

8. Rights under KVKK Art. 11

You may request (among other rights) to learn whether your data is processed, to request information, correction, deletion/destruction, notification to third parties, objection to exclusively automated adverse outcomes, and compensation for unlawful processing.

Submit requests to info@fixiby.com. Identity verification may be required. You may also apply to the Personal Data Protection Authority (KVKK Board) where applicable.