This translation is provided for information. In case of any conflict, the Turkish version prevails.
This policy applies to the Listonya Management mobile app ("App") developed by Listonya. The App is designed for Listonya customer companies and the staff users they create to manage listings and portfolios; it is not intended for the general public and accounts cannot be created in the App.
1. Roles
- For listing, portfolio and customer information you enter, the data controller is the Listonya customer company you work for; Listonya is the data processor.
- For data processed for the App's security, sign-in verification and technical operation, Listonya is the data controller.
2. Data processed
| Data | Purpose |
|---|---|
| Company panel address | Connecting to your company's system |
| Mobile phone number | Sign-in with a one-time SMS verification code |
| User name, role and permissions | Showing only the actions you are allowed to perform |
| Listing information and photos | Creating, editing and publishing your company's listings |
| Linking and pool actions | Colleague approvals and listing pool sharing |
| IP address, date and time, activity logs | Security, abuse prevention and legal obligations |
3. Device permissions
- Camera: only when you choose to take a listing photo.
- Photo library: only when you choose to add photos to a listing; only the photos you select are uploaded.
The App does not request location, contacts, microphone or calendar permissions. You can revoke permissions in your device settings at any time; features other than adding photos keep working.
Note: your camera may add location data (EXIF) to photos. If you do not want to share it, turn off location tagging in your camera app.
4. Data stored on the device
Session keys (access and refresh tokens) are stored encrypted in the device's secure storage (iOS Keychain / Android Keystore). Your password is not stored on the device. The keys are deleted when you sign out.
5. What we do not do
We do not show ads or use advertising identifiers, we do not use third-party analytics or tracking tools, and we do not sell your data or share it for marketing.
6. Transfers
Data is processed on servers belonging to your company's Listonya system. Sign-in codes are sent through an SMS provider. Data is shared only as needed with hosting and communication providers and, where legally required, with authorities. All communication is encrypted with HTTPS.
7. Retention and deletion
When your company deletes or deactivates your user, your access to the App ends. Listings you created belong to your company and remain in its account. Security logs are kept for the period required by law. See Account and Data Deletion for the steps.
8. Your rights and contact
For your KVKK rights, contact the company you work for first; for matters concerning the App itself, write to [email protected].