1. Introduction

At Zanthex, we respect your privacy and take the protection of your personal data seriously. This Privacy Policy explains what information we collect, how we use, store, and protect it when you use our services.

2. Data Collected

2.1 Account Information

When you register, we collect company name, full name, email address, phone number, and industry information.

2.2 Usage Data

During your platform use, call recordings, call transcripts, chatbot message contents, transaction logs, and performance metrics may be collected.

2.3 Payment Information

For credit loading transactions, payment method information (last 4 digits of card, transaction reference) is recorded. Full card details are not stored by us; payment processing is handled through PCI DSS compliant payment infrastructure.

2.4 Technical Data

IP address, browser information, device type, operating system, and session information are collected automatically.

3. Purposes of Data Use

Collected data is used for the following purposes:

Providing, operating, and improving our services
Providing customer support
Conducting billing and payment transactions
Ensuring platform security and fraud prevention
Fulfilling legal obligations
Measuring and analyzing service quality

4. Data Security

Industry-standard measures are implemented to ensure the security of your data:

Stored data is protected with AES-256 encryption.
All communications are encrypted with TLS 1.3 protocol.
Regular security audits and penetration tests are conducted.
Access controls and authorization mechanisms are enforced.

5. Data Storage Location

All data is stored on servers located in Turkey. This includes account information, call recordings, audio recordings, call transcripts, chatbot messages, call data, knowledge base content, invoice records, and technical logs. No user data is permanently stored outside of Turkey.

6. Voice Services and AI Processing

Our voice services provide AI-powered real-time conversation processing. During this process:

Voice data is temporarily transmitted through Google Cloud infrastructure for processing by the AI model.
We have an Enterprise Agreement with Google Cloud. Under this agreement, transmitted data is not used by Google for model training, advertising, or any other purpose.
After processing is completed, voice data is not stored on Google Cloud servers.
Generated call transcripts and analysis results are transferred to and stored on our servers in Turkey.

7. Data Sharing

Your personal data is not shared with third parties except in the following cases:

Service providers: Our partners working under contract for hosting, payment infrastructure, and AI processing services (all subject to data protection agreements).
Legal requirements: Providing information to authorized institutions as required by court orders, prosecution requests, or legal regulations.

8. Cookies

Our platform uses essential cookies for session management and basic functionality. These cookies are necessary for the platform to function properly and cannot be disabled. No third-party cookies for analytics or advertising purposes are used.

9. Data Retention Periods

Account information: As long as the account is active, plus 30 days after closure
Call recordings and transcripts: 1 year (can be deleted earlier by the user)
Invoice and payment records: 10 years as required by law
Log records: 2 years (as required by Law No. 5651)

10. Your Rights

Under the Personal Data Protection Law No. 6698, you have the following rights:

Learn whether your personal data is being processed
Request information if processed
Request correction or deletion of data
Object to processing
Request data portability

For detailed information, please review our Data Protection Notice.

11. Contact

For privacy-related questions: [email protected]