Privacy Policy

1. Data Controller

ActorRating Yazılım A.Ş. ('we', 'us', 'our') is the data controller responsible for the processing of your personal data. We are a limited company registered in Istanbul, Türkiye. For privacy matters, please contact us at contact@actorrating.com.

2. Personal Data We Collect

We collect the following categories of personal data:

• Account information (name, email address, profile picture from Google Sign-In)
• Usage data (actor ratings, performance reviews, comments)
• Technical data (IP address, browser type, device information)
• Session data (login times, user preferences)
• Analytics data (page views, feature usage, performance metrics)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR and KVKK:

• Consent: When you explicitly agree to our data processing activities
• Contract performance: To provide our rating and review services
• Legitimate interest: To improve our services, ensure security, and prevent fraud
• Legal obligation: To comply with applicable laws and regulations

4. How We Use Your Data

We use your personal data for the following purposes:

• Providing and maintaining our actor rating platform
• Processing your ratings and reviews
• Personalizing your user experience
• Ensuring platform security and preventing abuse
• Analyzing usage patterns to improve our services
• Communicating with you about your account and our services
• Complying with legal obligations

5. Data Sharing and Third Parties

We may share your data with the following third parties. We only share data necessary for the operation of our Service:

• Google (for authentication via Google Sign-In) - See Google's Privacy Policy: https://policies.google.com/privacy
• Vercel (for hosting and infrastructure) - See Vercel's Privacy Policy: https://vercel.com/legal/privacy-policy
• Supabase (for database and backend services) - See Supabase's Privacy Policy: https://supabase.com/privacy
• Legal authorities (when required by law or to protect our rights)
• Service providers (for technical support and maintenance, bound by confidentiality agreements)

6. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Account data: Until you delete your account or request deletion
• Usage data: Up to 3 years for analytics and service improvement
• Technical logs: Up to 1 year for security and troubleshooting
• Legal compliance: As required by applicable laws

7. Your Rights Under GDPR and KVKK

You have the following rights regarding your personal data:

• Right of access: Request information about your personal data
• Right of rectification: Correct inaccurate or incomplete data
• Right of erasure: Request deletion of your personal data (see Account Deletion below)
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time
• Right to lodge a complaint: Contact supervisory authorities

7.1. Account Deletion

You can delete your account and all associated data at any time through the following methods:

• Account Settings: Navigate to your profile settings and select 'Delete Account'
• Email Request: Send a deletion request to contact@actorrating.com with your account email
• Data Export: Before deletion, you can export your data from your profile page
• Processing Time: Account deletion is processed within 30 days of your request
• Retention Exceptions: Some data may be retained longer if required by law (e.g., transaction records for tax purposes)

8. Cookies and Tracking

We use cookies and similar technologies categorized as follows:

• Essential Cookies: Required for the Service to function (e.g., maintaining your login session, security features). These cannot be disabled.
• Functional Cookies: Remember your preferences and settings to enhance your experience.
• Analytics Cookies: Help us understand platform usage and performance to improve our services. These are anonymized and aggregated.
• Security Cookies: Ensure security and prevent fraud, including reCAPTCHA for bot prevention.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection
• Incident response procedures

9.1. Data Breach Notification

In the event of a data breach that may affect your personal data, we will:

• Notify relevant supervisory authorities within 72 hours of becoming aware of the breach (as required by GDPR)
• Notify affected users without undue delay if the breach is likely to result in a high risk to their rights and freedoms
• Provide clear information about the nature of the breach, likely consequences, and measures taken to address it
• Provide guidance on steps you can take to protect yourself
• Maintain records of all data breaches as required by law

10. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure adequate protection through:

• Standard contractual clauses (SCCs)
• Adequacy decisions by relevant authorities
• Other appropriate safeguards as required by law

11. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the 'Last updated' date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

13. Contact Information

For any questions about this Privacy Policy or to exercise your rights, please contact us:

• Email: contact@actorrating.com
• Company: ActorRating Yazılım A.Ş.
• Address: Istanbul, Türkiye
• For Turkish users: You may also contact the Turkish Personal Data Protection Authority (KVKK)