This text is for informational purposes. For requests and contact channels, please use the Contact page.
Data Controller
The data controller responsible for processing personal data under this policy:
- Legal name: MAYKA GLOBAL DIŞ TİCARET TEKNOLOJİ LİMİTED ŞİRKETİ (MAYTRAS brand)
- Address: Cevizli Mah. Tugay Yolu Cad. Piazza AVM No: 69 C İç Kapı No: 222, Maltepe, İstanbul, Turkey
- Tax office / no: KARTAL V.D. · 6132011848 · MERSIS: 0613201184800001
- KEP (registered e-mail): maykachem@hs1.kep.tr
- Contact e-mail: yasin@maykatr.com
Scope and roles
This policy applies to visitors, demo requesters, self-serve registrants, paying customers, platform users, API users, support ticket submitters, and corporate decision-makers.
MAYTRAS acts as a data controller for most processing activities. For data uploaded to the platform by enterprise customers on behalf of their own end users or employees, MAYTRAS may act as a data processor under the applicable contract. This role distinction is clarified in the Data Processing Addendum (DPA) for enterprise customers.
Categories of personal data processed
Identity and contact data, account and authorisation information, company and billing information, plan and subscription records, payment metadata, technical logs, IP / device / browser data, support correspondence, cookie preferences, and platform inputs may be processed.
Platform inputs may include product descriptions, HS/GTIŞP codes, trade documents, market research notes, cost assumptions, supplier/customer lists, AI prompts, and API call metadata.
Demo request data submitted by email (name, company, e-mail, phone, message) is processed solely for demo coordination and is not shared with third parties for marketing purposes.
- Account and identity data
- Company, billing, and subscription information
- Platform inputs and AI queries
- API, security, and error logs
Processing purposes
Data may be processed for: account creation, identity verification, authorisation, service delivery, AI decision-support generation, API usage management within plan scope, payment and invoice tracking, support, security, abuse prevention, product improvement, and fulfilment of legal obligations.
Analytics and advertising pixels: MAYTRAS does not currently use Google Analytics, Meta Pixel, or any third-party analytics/advertising pixel. If and when non-essential tracking technologies are activated, user consent will be required.
Legal bases
Under KVKK and GDPR, processing activities may rely on: performance of a contract, legal obligation, legitimate interest, establishment / exercise / protection of a legal right, and where necessary, explicit consent.
Enterprise customers are responsible for obtaining the necessary disclosures and authorisations for their own end users or employees.
Payment and card data
Card numbers, CVV codes, and full card data are not stored by MAYTRAS. The payment flow is processed via PayTR (PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş.); iyzico may be activated as an alternative provider.
MAYTRAS may process limited payment metadata: plan name, payment status, transaction reference, invoice record, subscription period, and failed-payment signals.
Retention, deletion, and data subject rights
Data is retained for the duration required by the processing purpose and applicable legal retention periods. Requests for account closure, data export, deletion, rectification, objection, withdrawal of consent, and data portability can be submitted through support channels.
Audit, security, invoice, and legal records may be retained for a limited period after account closure due to statutory retention obligations.
To exercise your rights, contact: yasin@maykatr.com
International transfers and sub-processors
Cloud, AI, payment, email, analytics, error-tracking, and support services may be based in Turkey or abroad. Where transfers occur, they are carried out with contractual, technical, and administrative safeguards.
Current sub-processor categories are published on the Subprocessors page. For enterprise customers, notification and objection processes may be governed by the applicable contract.
KVKK (Turkish Data Protection Law)
For the Turkish-language KVKK Data Subject Illumination Text (“Aydınlatma Metni”) required under Turkish law, please see: legal/kvkk.html (Turkish only).