Privacy Policy and KVKK Disclosure

Data controller: Roynof (Muzaffer Berke Savaş). Roynof currently operates as a sole proprietorship and company registration is in progress; the controller details will be updated here once registration is complete. Roynof is a digital advertising service that manages Google and Meta (Facebook/Instagram) ads on behalf of businesses. This policy covers the roynof.com website and our ad-management service.

Through the application form: business name, contact name, email, phone, a description of your business, your goals, and your budget. During the service: the performance data of your ad accounts (spend, impressions, clicks, conversions). The site uses no analytics cookies; session cookies are used only to sign in to the client and operator panels.

Your data is processed only to set up your ad campaigns, manage your budget, prepare performance reports, deliver our service, and communicate with you. Your data is never sold to or shared with third parties for marketing.

Your personal data is processed under Article 5 of the KVKK on the following legal bases: that it is directly related to the conclusion or performance of a contract, that it is necessary for the controller to fulfil a legal obligation, and the legitimate interests of the controller provided your fundamental rights and freedoms are not harmed. Where explicit consent is required, processing relies solely on your consent, which you may withdraw at any time.

To deliver the service, your data is shared on a purpose-limited basis with the infrastructure and service providers below. As some of these providers are located abroad, the relevant data may be transferred outside Turkey under the KVKK:

• Vercel — website hosting
• Railway — application and database infrastructure
• Telegram — operator and client notifications
• Resend — delivery of contact emails
• Google Ads API and Meta Marketing API — ad-account management

Access to your ad accounts happens only with your approval and through the official APIs of these platforms. Access credentials are never shared with third parties.

Your data is retained for as long as the purpose of processing requires and applicable legislation prescribes. When the service relationship ends, your data is deleted or anonymised — subject to any statutory retention obligations — and is also deleted upon your request.

Data is transmitted over encrypted connections (HTTPS) and stored on access-restricted systems. Ad-account access credentials are never shared with third parties.

Under Article 11 of the KVKK, you have the right to:

• Learn whether your personal data is being processed
• Request information if it has been processed
• Learn the purpose of processing and whether it is used in line with that purpose
• Know the third parties, at home or abroad, to whom the data has been transferred
• Request that incomplete or inaccurate data be corrected
• Request that the data be erased or destroyed under the conditions set out in the law
• Request that correction, erasure, and destruction be notified to the third parties to whom the data was transferred
• Object to a result against you arising from analysis exclusively by automated systems
• Claim compensation for damage you suffer due to unlawful processing

You can send us your KVKK requests and questions. Your application will be answered as soon as possible and within 30 days at the latest. The primary application address is bildirim@roynof.com (this mailbox is undergoing verification); alternatively, you may use roynofagency@gmail.com.

bildirim@roynof.comroynofagency@gmail.com

Our service uses the Google Ads and Meta Marketing APIs. Your data on those platforms is also subject to their own privacy policies: the Google Privacy Policy and the Meta Data Policy.