1. Data Controller
Callmenta Call Center Technologies Inc. - Çınarlı Mah. 1572 Sok. No:33, Konak / İzmir, Türkiye. The entity referred to in this notice as "Callmenta" acts as the data controller under KVKK.
2. Categories of Personal Data Processed
- Marketing: Newsletter subscription status, email open and click records.
- Identity: First name, last name.
- Contact: Email, phone, company information (where provided).
- Customer transaction: Request subject, message content, demo enquiries.
- Transaction security: IP address, browser data, session records, log files.
- Call recordings (for customers using our operational services): Customer-agent audio, transcripts and AI analysis outputs - solely under the scope of the service agreement.
3. Purpose of Processing and Legal Basis
Your personal data is processed for the following purposes:
- Sending service announcements and the weekly newsletter (every message carries an unsubscribe link)
- Responding to your enquiries and complaints
- Running demo, sales and proposal processes
- Service delivery and contract performance
- Satisfaction measurement and service-quality improvement
- Compliance with legal obligations
- Information security and fraud prevention
Legal basis: explicit consent, conclusion / performance of a contract, legal obligation, legitimate interest (KVKK Art. 5/2; GDPR Art. 6).
4. Data Transfers
Personal data may be shared with business partners, suppliers, competent public authorities and infrastructure providers to the extent strictly necessary to deliver the service, in line with applicable law and limited to the stated purpose. Cross-border transfers are made only under the conditions set out in KVKK Art. 9 and, where applicable, GDPR Chapter V.
5. Retention Periods
Retention periods vary by data category:
- Newsletter subscription: For as long as the subscription lasts; after opting out the address is kept only to prevent further sending
- Enquiry data: up to 24 months
- Contract data: contract term + 10 years (Turkish Code of Obligations)
- Call recordings (operations customers): as set out in the contract, up to a maximum of 5 years
- Transaction security logs: 6 months - 2 years
6. Data Subject Rights (KVKK Art. 11)
As a data subject, you have the right to:
- Learn whether your personal data is being processed
- Request information about how your data is processed
- Learn the purpose of processing and whether the data is used as intended
- Know the third parties - domestic or international - to whom your data is transferred
- Request correction of incomplete or inaccurate data
- Request erasure or destruction under KVKK Art. 7
- Request that any correction, erasure or destruction be notified to third parties to whom your data was transferred
- Object to decisions made solely by automated systems where they produce adverse outcomes for you
- Claim compensation if you suffer damages due to unlawful processing
7. Cookie Policy
Our website uses essential cookies for session management (login, language preference, theme) and anonymous usage statistics. We do not use marketing or third-party tracking cookies. You can manage cookies via your browser settings.
8. Security Measures
Personal data is protected in transit with TLS 1.3, at rest with AES-256 encryption, by role-based access, two-factor authentication (2FA), access logs and regular penetration tests. For customers using the operations service, the Edge Local option ensures data never leaves the customer environment and is never transferred to Callmenta servers.
9. Requests and Contact
You may submit KVKK Art. 13 requests by email to info@callmenta.com, in writing to Çınarlı Mah. 1572 Sok. No:33, Konak / İzmir, Türkiye, or via our KEP address. Requests are reviewed and concluded within 30 (thirty) days at the latest. While such requests are generally free of charge, the fee schedule set by the Personal Data Protection Board (KVKK Kurulu) may apply.
Google account connections and Google user data
Connecting your Google account to Callmenta is optional. When you connect, we only access the data required for the feature listed below, and only to the extent you authorize.
Which Google data we access
- Sign in with Google: your Google account email address, your name, and your Google account ID. We use these only to identify you and enable you to sign in to the panel.
- Google Calendar and Google Meet: events in your calendar and busy or free time information. We use these to suggest conflict-free meeting times, add meetings you create from the panel to your calendar with a Meet link, and display your calendar in the panel.
- Gmail signature settings: the list of your Gmail sending addresses and your signature settings. We use these only to write the email signature you prepare in the panel to your Gmail settings. We do not read, send, or delete your emails.
- Google Drive: only when a company administrator connects, we use the Drive location selected by the administrator to upload and retrieve company documents and call recordings.
How we store it
The access keys you provide for Google Calendar and Gmail integration, as well as the access keys for the Google Drive account linked for company documents, are stored encrypted in our database. Calendar and signature information is processed solely to enable the relevant feature. You can remove the integration at any time from the Connections and Email Signature screens in the panel, from the Storage tab in company settings for Drive, or from the permissions page of your Google account (myaccount.google.com/permissions). When you remove the integration from the panel, we delete your access keys.
We do not share with anyone
- We do not sell your Google data or use it for advertising purposes.
- We do not transfer your Google data to third parties. It is only retained in our hosting infrastructure to run the service, or shared with an authorized authority when legally required.
- We do not use your Google data to train general-purpose artificial intelligence or machine learning models.
- Our employees do not view your Google data unless you explicitly grant permission for support purposes or there is a security or legal obligation.
Google API Services User Data Policy
Callmenta's use of information obtained from Google APIs and its transfer to other applications complies with the Google API Services User Data Policy, including the Limited Use conditions.
Callmenta's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
This notice is interpreted under Türkiye's Law No. 6698 (KVKK) and its secondary legislation, alongside the EU GDPR where applicable. For any questions, reach us via the contact page.