Last updated: April 1, 2026
1. Introduction
The Network. ("Company", "we", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, protect, and disclose personal data through our website, mobile application, and desktop application (collectively, "Services").
This policy has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).
2. Data Controller
The data controller responsible for processing your personal data:
- Company: The Network.
- Address: The Network. | Kreatif Medya ve Reklam Ajansı, Reşadiye, Kumyol Caddesi, Çorlu/Tekirdağ, Türkiye
- Email: info@thenetwork.tr
3. Personal Data We Collect
3.1. Identity and Contact Information
We collect the following information to provide our services:
- Full name
- Email address
- Phone number
- Profile photo (optional)
3.2. Professional Information
As part of our business management services, the following professional data is processed:
- Task and project information
- Time tracking records (work hours, descriptions)
- Department and position
- Performance data
- Invoice and financial records
3.3. Technical Data
The following technical data is collected for proper service operation:
- Device type and operating system (for notification service)
- Push notification token
- Login timestamps and IP address (for security purposes)
3.4. Location Data
Location data is collected only with your explicit consent and for specific features:
- Adding location to tasks (optional)
- Fixed asset location tracking
- Weather assessment for drone/shoot tasks
4. Purposes of Data Processing
Your personal data is processed for the following purposes:
- User account creation and authentication
- Providing project and task management services
- Generating invoices, quotes, and financial reports
- Sending push notifications (task updates, reminders)
- Enabling client portal access for project tracking
- Improving service quality
- Fulfilling legal obligations
- Ensuring information security
5. Legal Basis for Processing
Your personal data is processed based on the following legal grounds under KVKK Article 5 and GDPR Article 6:
- Performance of contract: Data necessary for service agreement fulfillment
- Legitimate interest: Service quality improvement and security
- Explicit consent: Location data and push notifications
- Legal obligation: Accounting and tax regulation requirements
6. Third-Party Services
We work with the following third-party service providers to deliver our services:
- Amazon Web Services (AWS): File storage and content delivery network (S3 and CloudFront). Media files are stored in the EU region (eu-central-1).
- Google Maps: Map and location services. Only active when location features are used.
- Expo (React Native): Mobile push notification infrastructure.
- SMTP Email Service: Transactional email delivery (password resets, notifications).
These service providers can only access data necessary for service delivery and may not use your data for their own purposes.
7. Data Security
We implement the following technical and administrative measures to protect your data:
- HTTPS/TLS encryption for all data transmission
- JWT-based authentication and authorization
- AES-256-GCM encryption for API key protection at rest
- Secure storage on mobile devices (iOS Keychain, Android Keystore)
- Role-based access control (RBAC)
- Regular security updates
8. Data Retention
Your personal data is retained for as long as necessary to fulfill the purposes for which it was collected. When your account is deleted, all personal data will be deleted or anonymized within a reasonable period, except for data subject to legal retention obligations (accounting records for 10 years).
9. Cookies
Our website uses technically necessary cookies for session management. These cookies are required for authentication and security purposes. We do not use third-party cookies for advertising or analytics purposes.
10. Your Rights
Under KVKK Article 11 and GDPR Articles 15-22, you have the following rights:
- Information: Right to know whether your personal data is being processed
- Access: Right to request access to your processed data
- Rectification: Right to request correction of incomplete or inaccurate data
- Erasure: Right to request deletion of your personal data
- Restriction: Right to request restriction of processing under certain conditions
- Data portability: Right to receive your data in a structured format
- Objection: Right to object to processing based on legitimate interest
- Automated decisions: Right to object to decisions made solely by automated processing
To exercise your rights, please contact us at info@thenetwork.tr. Your request will be answered within 30 days.
11. Account Deletion
If you wish to delete your account and associated personal data, you can use the account deletion feature within the application or send your request to info@thenetwork.tr. Account deletion is irreversible and all data will be permanently deleted, except for data subject to legal retention obligations.
12. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will promptly delete such data.
13. International Data Transfers
Our file storage service (AWS) is located in the EU region (Frankfurt, Germany). Your data is processed in KVKK and GDPR-compliant countries. In cases where data is transferred to countries without adequate protection, appropriate safeguards (standard contractual clauses) are applied.
14. Policy Changes
We may update this privacy policy from time to time. In case of significant changes, we will notify you through in-app notification or email. The updated policy becomes effective on the date of publication.
15. Contact
For questions or requests regarding our privacy policy, you can contact us:
- Company: The Network.
- Address: The Network. | Kreatif Medya ve Reklam Ajansı, Reşadiye, Kumyol Caddesi, Çorlu/Tekirdağ, Türkiye
- Email: info@thenetwork.tr
Under KVKK, you also have the right to lodge a complaint with the Turkish Personal Data Protection Authority (kvkk.gov.tr). Under GDPR, you may contact your local data protection supervisory authority.
16. Social Media Account Data (Instagram)
Our influencers, freelancers and partners may choose to connect their Instagram accounts to our system for profile verification and metric tracking. The connection is established through Meta's official authorization infrastructure (OAuth); your Instagram password never reaches us and is never stored.
When an account is connected, the following data is processed with read-only access:
- Profile information (username, display name, biography, profile picture, account type)
- Follower and following counts
- Post list with like and comment statistics
This data is processed for profile verification, up-to-date metric display and, for influencers, placement on our public roster page. The access token provided by Meta is stored encrypted. Permission to post on your behalf, read your messages or change your account settings is never requested.
You can remove the connection at any time from your panel or from the "Apps and Websites" section in Instagram's settings. When you submit a data deletion request through Meta, all Meta-sourced data (access token, profile information, post and metric history) is deleted from our system.