Security and KVKK

Your data stays in Türkiye, and stays safe.

Your field team's location, photos and work records are your most valuable business data. Here is plainly how we protect them.

Servers and database in Türkiye

TLS 1.2+

Every connection encrypted

Daily

Backups, so your data comes back if anything goes wrong

Chain

A tamper-proof audit log

01Hosting and infrastructure

Location: Application servers, database, files and backups are in Türkiye.
Database: Closed to the internet; only the app can reach it, with only the permissions it needs.
Servers: Protected by a firewall, key-only admin access and automatic security updates.
Backups: Taken every day; if something goes wrong, your data is restored from backup and work carries on.

02Access and identity

Permissions: Everyone sees only the data they need; each company's data is kept to itself. The web panel is for managers.
Brands: Brand managers follow their own brand's work live; live location is shown only if you turn it on.
Passwords: Stored irreversibly (bcrypt); nobody can see your password.
Photos: Only authorized users can open them.

03Monitoring and audit

Transport: All connections encrypted with TLS 1.2 or later; the panel opens over HTTPS only.
Audit log: Every important action goes into a chained log; history cannot be changed unnoticed, and evidence is ready when you need it.
Continuous monitoring: The system is monitored around the clock; excessive and malicious requests are limited automatically.
Error tracking: We catch problems without seeing personal data: reports carry only a user number, and screen recordings mask text and images.

04Location and privacy

When: Location is recorded only while the working day is open; off-hours belong to your team.
Verification: Mock-location apps and approximate location cannot be used to check in; every visit is real.
Advertising: No ads and no tracking; your data is never sold.

KVKK

Your data, under your control.

For data processed through the service, the data controller is the company using Merchifyt; Merchifyt processes it only on that company's instructions and to provide the service. When the service ends, data is handed over or deleted as the company instructs. If a breach is detected, the company is informed without delay.

Let's set up your field team together.

Tell us briefly about your team and your field work, and we will prepare a tailored quote quickly.

Send an email