Privacy and Personal Data Protection Policy
Last updated: 10 November 2026 (Europe/Istanbul) · Türkçe sürüm
1. Data controller
This policy applies to FastEntegre Yazılım Teknoloji ve Ticaret Limited Şirketi (“FastEntegre”, “we”), the website fastentegre.com, the merchant panel, and related services (“Services”).
- Contact: fastentegre.com/contact · Phone: +90 850 242 32 78
- Address: Oruçreis Mah. Giyimkent 18. Sk. No: 114A, Esenler, Istanbul, Türkiye
- MERSİS: 0385174063400001
- Privacy / KVKK requests: [email protected]
FastEntegre is the data controller for account and panel users under Turkish KVKK. Buyer data on marketplace orders is processed for the merchant’s store and on the merchant’s instructions.
No representative established in the European Union has been appointed.
2. Scope
Covers website visitors, panel users, store/order/product data in the panel, and read and confirmed-write calls via ChatGPT/OpenAI and other MCP clients at https://fastentegre.com/mcp.
Card number, expiry, and security code are not stored in the FastEntegre database. Panel balance and plan payments go to PayTR with 3-D Secure. Storefront card payments use the merchant’s own PayTR, iyzico, or Stripe account. In PayTR direct mode the card is sent to PayTR only for that payment and is not written to our database.
3. Data categories
Account contact data; store and marketplace linkage metadata; order/shipment/invoice operational fields. End-customer PII may exist in the panel. MCP order read tools return a masked buyer name (e.g. “A*** V***”), the delivery city in plain text, and omit phone, email, and full address. Product read tools return sale, wholesale, and cost prices for the authorized merchant catalog.
The cookie practice follows the rules of the visitor’s country. Country is the code reported by Cloudflare in front of the site. If that code is missing or is outside the European list below, no consent window is shown.
Essential cookies run in every country without a prompt: the panel session, the cookie choice itself, and a theme the user picked. A storefront may also remember currency and a page experiment.
EEA, United Kingdom, and Switzerland: under the ePrivacy rules and the GDPR (UK GDPR in the United Kingdom, FADP in Switzerland), measurement and advertising cookies are not loaded before consent. Those cookies are Google Analytics and Google Ads inside Google Tag Manager, the Meta Pixel, and the OpenAI ads pixel. Accept and “essential only” are equally available. The choice is stored for 6 months and then asked again. While the choice is missing or refused, those cookies are not written.
Türkiye and other countries: measurement cookies load when the page opens, under KVKK and this notice. No separate cookie-consent window is shown. You can delete or block cookies in the browser.
4. ChatGPT / OpenAI MCP
4.1 When data is processed
When you connect FastEntegre via OAuth in an OpenAI product or another MCP client and invoke a tool, our server returns data for your authorized store, or updates it after you confirm a write.
4.2 Sharing with OpenAI
Tool inputs and outputs are transmitted to OpenAI to run the chat. We do not sell data to OpenAI for advertising.
4.3 Tool outputs
Read tools return operational merchant data and are marked readOnlyHint: true. Buyer names are masked; city is included; merchant price fields (sale, wholesale, cost) are included. API secrets, tokens, and debug dumps are not returned.
Write tools (stock.set, stock.adjust, customers.create, orders.create, products.publish, products.update, products.setActive, questions.answer) are not read-only. They require a token scope and a two-step confirm: a preview with confirm=false, then the same arguments with confirm=true. Creating a customer can store the name, phone, email, address, and tax id you submit. Card checkout, shipment creation, and invoicing are not available over MCP.
4.4 Purpose
To answer the merchant’s operational questions and to apply stock, catalog, order, publish, or question actions the merchant explicitly requests.
5–7. Purposes, recipients, transfers
Contract performance, integrations, security, site measurement, and legal obligations. Recipients include marketplaces, carriers, e-invoice providers, PayTR, iyzico, Stripe, infrastructure and email vendors, Google, Meta, and OpenAI when you invoke tools or when the marketing pixel runs.
The primary database runs on our own servers. Encrypted backups are stored on Cloudflare R2 in the European Union. Google, Meta, OpenAI, and the marketplaces, carriers, or e-invoice providers you connect may process data in their own countries. Transfers are limited to providing the service, running an integration you connected, or measuring the site.
8. Retention
- Account, store, product, stock, and order records: for as long as the account and the service record remain. On an erasure request, records that are financial documents are kept for the statutory period; other personal data in scope is deleted or anonymized.
- Panel audit log (login, export, invite, password, OAuth, MCP writes): 90 days, then deleted.
- Panel access log (IP, request URL, user id): 90 days.
- Marketplace and integration request logs: hot copies rotate nightly; the archive is kept 90 days.
- Encrypted off-site backup (Cloudflare R2, European Union): database copy 10 days; log and access-log copy 30 days. On-server database dumps keep only the latest few copies, and the remote file backup rolls off by size. There is no extra backup period measured in years.
- Support tickets: for the life of the request and the account. There is no separate automatic purge.
9–13. Security, rights, children, changes, contact
We apply access control, TLS, and least privilege. The database is not open to the public network. Exercise KVKK/GDPR rights via [email protected] or /contact. Disconnect FastEntegre in the MCP client to stop further tool processing.
FastEntegre Yazılım Teknoloji ve Ticaret Limited Şirketi · Oruçreis Mah. Giyimkent 18. Sk. No: 114A, Esenler, Istanbul · MERSİS: 0385174063400001
