KVKK information notice

Last updated: September 30, 2026

This notice explains, as required by Turkey's Law No. 6698 on the Protection of Personal Data (KVKK), how your personal data is processed when you use BasicMailer. More is in the Privacy policy.

Data controller#

BasicMailer is run by Mehmet Şahin as an individual. Contact: [email protected]

What we process#

  • Identity and contact: your name and email address.
  • Service details: your plan, domains, mailboxes, routing settings and sending records.
  • Security records: your password hash, the IP address and browser of the device you sign in from, and important actions you take in your panel.
  • Payment: your Polar customer and subscription IDs. Your card details never reach us.

The content of the mail in your mailboxes is your data; we only store and deliver it on your behalf.

Why we process it#

  • To manage your account and subscription.
  • To receive, store and send your mail.
  • To prevent spam and abuse and protect your account.
  • To send you the notices your account requires.
  • To meet our legal obligations.

Your data is collected electronically through the sign-up form, Google sign-in, the customer panel and mail traffic. It is processed on these grounds of Article 5 of the KVKK:

  • concluding and performing the contract,
  • our legal obligations,
  • protecting a right,
  • our legitimate interest in keeping the service secure.

Who we share it with#

Your data is transferred only to these services, to run BasicMailer:

  • Our server: Istanbul.
  • Amazon Web Services: mail to outside addresses.
  • Polar: payments and invoices.
  • Google: only if you sign in with Google.

Amazon Web Services, Polar and Google are outside Turkey, so these count as transfers abroad. If the law requires it, your data may also be shared with the authorities.

How long we keep it#

We keep your data as long as your account is open and for the periods the law requires. Details are in the Privacy policy.

Your rights#

Under Article 11 of the KVKK you can:

  • learn whether your data is processed and get information about it,
  • learn who your data is transferred to,
  • ask for it to be corrected if it is wrong, and deleted where appropriate,
  • object to a decision against you that results from automated evaluation,
  • ask for compensation if you suffered damage.

To do so, simply write to [email protected] from the email address registered to your account. We answer within 30 days.