This Privacy Policy explains the principles under which personal data are processed in connection with the Relteco ID service provided by Relteco Teknoloji Sanayi ve Ticaret Limited Şirketi ("Relteco"), with whom they are shared and how they are protected. Detailed information under Law No. 6698 on the Protection of Personal Data is provided in the Privacy Notice. Each application you sign in to with Relteco ID has its own privacy texts for the data processed in that application. This Policy is provided in Turkish and English; in the event of any inconsistency, the Turkish version shall prevail.
1. What Is Relteco ID?
Relteco ID is the account used in common across the Relteco applications. The account is accessed not with a password but with a single-use verification code sent to your telephone number. The permanent identity of the account is not your telephone number but an unchanging identifier assigned to your account; when you change your telephone number, your account and linked applications are preserved.
2. What Data Do We Process?
- Account details: telephone number, first name, last name and e-mail address; your profile picture if you add one.
- Information on the use of the account: the Relteco applications to which the account is linked, the date the account was created, telephone number changes, account deletion requests, records of the acceptance of the Terms of Use and the verification status of the e-mail address.
- Security information: IP address, sign-in and session records, session and device information, hash values of verification codes and counters kept to prevent misuse.
- Business account details: when you open a business account, its trade name, type, tax details, MERSIS number, invoicing address and invoicing e-mail; your team memberships and roles; records of invitations and team operations.
We do not process Turkish identity numbers, dates of birth, gender, location or passwords. We do not sell your personal data and do not use them for advertising.
3. For What Purposes Do We Use the Data?
We use your data to create and verify your account, to enable you to sign in to the Relteco applications with a common account, to carry out telephone number changes and account deletions, to manage business accounts and teams, to secure your account and prevent misuse, to notify you of important changes to your account and to fulfil our legal obligations.
4. Who Can See Your Data?
- Relteco applications: the application you sign in to with Relteco ID receives your account identifier, first name, last name, e-mail address, telephone number, your profile picture if you added one, and business memberships. The profile picture is published at an unguessable address that anyone who knows it can open; when you change or remove it in the Relteco ID app, the old address stops working. Location and device details in the photo are not kept; the profile picture is not processed for facial recognition. In the account deletion and number change processes, your account identifier and telephone number are notified to the linked applications. Each application processes these data in accordance with its own privacy texts.
- Your business team: if you are in a business team, your name and role are visible to the team members and your telephone number to the owner and administrators of the business. The business details are visible to the owner, administrators and accountants; staff see only the name of the business and their own role. A person who is neither a member of the team nor invited to it cannot learn that the business exists; an invitee sees the name of the business before responding to the invitation.
- Invitees: when you invite a person to a business team, the short message sent to that person contains your name. The message does not contain the name of the business.
- Our service providers: short messages are delivered through our SMS service provider in Türkiye (Netgsm); our servers are located on the infrastructure of a hosting provider established in Türkiye. E-mails are sent from our own e-mail server. The domain name (DNS) service has no access to your data.
- Competent authorities: only where legally required and to the extent provided by legislation.
Your data in connection with Relteco ID are kept on servers in Türkiye and are not transferred abroad.
5. Security Notices
When you create an account, a link is sent to your e-mail address so that you can verify it. Opening the link is not required to use your account; however, security notices are sent only to a verified address. When your telephone number is changed, a short message is sent to your previous number and an e-mail to your verified e-mail address. For your security, these notices show only the last two digits of the new number. If you did not make this change, you should contact destek@relteco.com immediately. If an account deletion you requested is postponed because a matter remains to be settled in a linked application, you are informed at your telephone number and verified e-mail address. No marketing messages are sent in connection with Relteco ID.
6. How Do We Protect Your Data?
We take appropriate technical and organisational measures under Article 12 of Law No. 6698. In particular:
- all communication is encrypted with TLS;
- verification codes are stored only as hash values and are valid for a short time; code deliveries and failed attempts are limited per telephone number and IP address;
- operations such as account deletion, telephone number change and transfer of business ownership require a new verification;
- you can add a second verification method (a passkey, an authenticator application, recovery codes) to your account; the second method is then also required when signing in from a new device and for the operations above; for passkeys only the public key is stored, and the private key never leaves your device;
- on id.relteco.com you can see your open sessions and sign out of those you don't recognise;
- access tokens issued to applications are short-lived; long-lived session tokens are renewed on every use, and reuse of an old token terminates the session;
- in mobile applications the session token is stored in the device's secure key store (iOS Keychain, Android Keystore);
- administrative interfaces are reachable only over an encrypted private network, and permissions are kept to a minimum;
- account notifications sent to the applications are signed.
7. Retention Periods
Your account details are retained for as long as your account exists; when you delete your account they are deleted at the end of the thirty (30) day waiting period. Sign-in and security records are retained for ninety (90) days; records of the acceptance of the Terms of Use and of number changes, account deletions and business operations are retained for ten (10) years for use as evidence in potential disputes. Detailed periods are set out in the Privacy Notice.
8. Your Rights
On id.relteco.com you can view your account details, request a new e-mail verification link, change your telephone number and delete your account. For the rectification of your first name, last name or e-mail address, for a copy of your data and for your other rights under Article 11 of Law No. 6698, you may apply by the methods set out in the Privacy Notice.
9. Children
A person must be at least thirteen (13) years of age to create a Relteco ID account; persons under eighteen (18) use the account with the permission of their parent or guardian. If we learn that an account belongs to a person under thirteen, we will delete the account.
10. Cookies
id.relteco.com uses only cookies that are strictly necessary for sign-in and sessions to function; no analytics, advertising or tracking cookies are used. Details are set out in the Cookie Policy.
11. Changes
This Policy is updated as necessary. The current version is published at id.relteco.com/legal with its version number and effective date; material changes are notified to you separately.
12. Contact
Relteco Teknoloji Sanayi ve Ticaret Limited Şirketi · Maltepe Mah. Gazi Mustafa Kemal Bulvarı, Tolluoğlu No:71 İç Kapı No:48, Çankaya/Ankara, Türkiye · E-mail: info@relteco.com · Support: destek@relteco.com · Registered e-mail (KEP): relteco@hs01.kep.tr