1. Platform and Data Controllers
AISurvey provides online survey creation, publishing, response collection, statistical analysis and reporting. Argeva Bilişim Sistemleri Ltd. Şti. and Ege Sistem Bilgi İşlem Ltd. Şti. jointly operate the platform and jointly determine the purposes and essential means of processing related to its operation. They act as joint data controllers. A survey creator may have separate responsibilities for the data collected through their survey.
2. Data Collected and Collection Methods
Depending on the service, we process names, email addresses, account details, session records and preferences; survey questions, responses and information requested by survey creators; and support messages. Data is collected electronically through registration forms, survey pages, user actions, support channels and technical operation. Surveys may include sensitive categories of personal data, which require additional legal conditions.
3. Purposes of Processing
Data is processed to register and manage accounts, authenticate users, maintain sessions, create and publish surveys, store responses, generate statistical analyses and reports, provide support, investigate security incidents, prevent unauthorized access and comply with legal obligations. Processing is limited to what is relevant and necessary for these purposes.
4. Legal Bases
Account and service processing relies, where applicable, on Article 5(2)(c) of Turkish Law No. 6698 (KVKK), concerning contract performance. Security processing may rely on Article 5(2)(f), legitimate interests subject to applicable safeguards. Mandatory records rely on Article 5(2)(ç), legal obligations; dispute records on Article 5(2)(e), establishment, exercise or protection of rights. The legal basis for survey answers depends on each survey. Optional IP recording and other consent-based operations require explicit consent. Sensitive data is subject to Article 6.
5. Survey Creators and Participants
Survey creators determine their questions, audience and purposes and may therefore be separate data controllers for their surveys. They must provide required notices and establish an appropriate legal basis. The two platform operators remain responsible for their own platform processing. A survey without a name field is not necessarily anonymous if individuals can be identified through other information.
6. IP Addresses and Participant Consent
A survey participant’s IP (Internet Protocol) address is recorded for this optional purpose only after the required information is provided and explicit consent is obtained. If consent is withheld, this optional IP record is not created. Separate technical logs may exist at the web server, security infrastructure or hosting layer and must be assessed independently. Consent can be withdrawn without retroactively invalidating prior lawful processing.
7. Analytics and Artificial Intelligence
AISurvey offers statistical and AI-assisted survey analysis. OpenAI or other external API (Application Programming Interface) providers may be used. Content submitted for analysis may be sent to the provider to perform the requested function. Transfers involving personal data require an appropriate legal basis and applicable transfer safeguards. The relevant provider’s terms and data handling practices apply to that processing. AI-generated results may contain errors and should be reviewed.
8. Sharing and International Transfers
AISurvey databases are hosted in Türkiye. Data may be shared with authorized hosting, infrastructure and support providers where necessary, and with public authorities when legally required. External AI API requests may involve transfers of submitted content to providers abroad. International transfers of personal data must satisfy Article 9 of the KVKK and applicable safeguards. Domestic database hosting does not mean that no data ever leaves Türkiye.
9. Data Security
The joint controllers are required under Article 12 of the KVKK to adopt appropriate technical and organizational safeguards against unlawful processing and unauthorized access. Account security, restricted permissions, software maintenance, log review and incident response form part of this approach. No internet service can guarantee absolute security.
10. Retention, Drafts and Permanent Deletion
Surveys may remain in draft status. Deleted surveys are kept in a recoverable deleted-items area for 30 days by default and are then permanently deleted. Users may choose permanent deletion before this period expires. The automatic deletion interval is configurable; the period shown in the deletion interface at the time of the action governs. Account and other records are retained according to their purposes and applicable legal obligations. Backups and legally required records may follow separate retention cycles.
11. Cookies
AISurvey uses cookies necessary for sessions, authentication, security and essential preferences. It does not use advertising-targeting or behavioral analytics cookies. Blocking essential cookies may prevent sign-in and session functions. If cookie practices change, the relevant notices and consent controls will be updated where required.
12. Data Subject Rights
Under Article 11 of the KVKK, individuals may ask whether their data is processed; request information about processing, its purposes and recipients; request correction or, where legally applicable, deletion or destruction; request notification of corrections or deletions to recipients; object to adverse outcomes produced exclusively by automated analysis; and seek compensation for damage caused by unlawful processing.
13. How to Submit a Request
Requests must be submitted to the controllers using the methods prescribed by the Turkish Communiqué on Applications to the Data Controller and include sufficient information for identification and review. Requests are answered as soon as possible and no later than 30 days. Formal applications sent by email must satisfy the applicable procedural requirements; publishing an email address does not make every ordinary email a legally valid application.
14. Policy Updates
This policy may change when services, processing activities or laws change. The current version is published through AISurvey. Where a new activity requires a separate notice or explicit consent, these requirements must be fulfilled before the relevant processing begins.
15. Controllers and Contact
Argeva Bilişim Sistemleri Ltd. Şti. — Gaziantep Teknopark, Yamaçtepe Mahallesi, Burç Yolu Caddesi, Mahmut Tevfik Atay Bulvarı, Block 4/C, Şahinbey/Gaziantep, Türkiye; email: argeva@argeva.com.tr. Ege Sistem Bilgi İşlem Ltd. Şti. — İzmir Technology Development Zone, A4 Building, İYTE Campus, Gülbahçe, Urla/İzmir, Türkiye; email: egesistem@egesistem.com.tr. Both organizations are joint controllers for the operation of AISurvey.