Effective Date: September 24, 2025
Last Updated: March 18, 2026
This Privacy Policy ("Policy") is issued by Kıyanus Ltd. Şti. ("Kıyanus," "we," "us," or "our"), a company registered in Turkey with its legal address at İhsaniye, Millet Cd. No:31/A, 42040 Selçuklu/Konya. This Policy outlines our practices regarding the collection, use, and disclosure of your information when you use our website and associated services (collectively, the "Service").
For the purposes of applicable data protection legislation, including the European Union's General Data Protection Regulation (GDPR), Kıyanus Ltd. Şti. is the 'data controller' for the personal data we process through the Service. This means we are responsible for deciding how we hold and use personal information about you. For payment transactions, we utilize a secure third-party payment gateway, which acts as a 'data processor' on our behalf. This relationship is explained in detail in Section 4.0 of this Policy.
This Policy aims to provide you, our user ("you"), with information that is concise, transparent, intelligible, and easily accessible regarding how we collect, use, protect, and share your personal data. We are fundamentally committed to protecting your privacy and handling your data in an open and transparent manner, establishing a reputation for integrity and ensuring your data's security.
This Policy applies to all personal data collected from users of our Service, including property seekers and real estate agents. It does not apply to any information collected offline or via channels other than this website.
By accessing or using our Service, you acknowledge that you have read and understood this Policy. In jurisdictions where explicit consent is required by law for certain data processing activities, we will obtain such consent from you before proceeding.
Account Registration: When you register for an account, we ask for your contact information, which includes your first and last name, email address, and a password. This information is necessary to create and secure your account.
User Profile Information: If you are a real estate agent or a user creating a public profile, you may provide additional information intended for public display. This can include your professional title, brokerage affiliation, a business phone number, a profile picture, and other details relevant to your professional services.
Property Listing Data: When you post a property for sale or rent, you provide detailed information about that property. This includes the property's address, description, price, photographs, videos, and other related features. While this is primarily data about a property, it becomes linked to your account and profile as the lister.
Communications: If you contact us directly for customer support or other inquiries, such as through our email address [email protected], we may receive additional information about you. This includes your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you choose to provide.
Log and Usage Data: Our servers automatically collect information when you access our Service and record it in log files. This data includes your Internet Protocol (IP) address, browser type, Internet Service Provider (ISP), operating system, date and time stamps, referring/exit pages, and clickstream data. This information is not linked to any personally identifiable information. We use it for analyzing trends, administering the site, tracking user movements, preventing fraud, and gathering broad demographic information for aggregate use.
Listing Analytics Data (Consent-Based): When you view a property listing on our platform, we may collect anonymized analytics data to help property owners and agents understand where interest in their listings is coming from. This data is only collected if you have given your explicit consent through our cookie consent prompt. The analytics data we collect includes: approximate geographic location (city, country, and region derived from your IP address), device type (mobile, tablet, or desktop), browser and operating system, and the referring website or source. This data is stored in aggregate form and is used solely to provide listing performance insights. We do not use this data to identify individual users. Your IP address is used only momentarily to derive location data and is not stored alongside the analytics record.
Cookies and Tracking Technologies: We use cookies and similar tracking technologies (like web beacons) to access or store information. Cookies are small data files stored on your device that help us operate and personalize the Service. They are used to store information including visitors' preferences and the pages on the website that the visitor accessed or visited. This information is used to optimize the user experience by customizing our web page content. For more detailed information on how we use these technologies and your choices, please see Section 8.0 (Cookie Policy).
Payment Processors: We do not directly collect, process, or store your payment card details. Our payment services are managed by our secure payment gateway, Iyzico. When you make a purchase, Iyzico handles the transaction securely. After the transaction is complete, Iyzico provides us with confirmation details, which may include your name, email address, the last four digits of your credit card, and a transaction ID. We do not receive your full financial information.
We process your personal data only when we have a valid legal reason to do so. Under the GDPR, we rely on specific lawful bases for our processing activities, ensuring that our use of your data is fair, lawful, and transparent.
Purpose: To create and manage your user account, publish your property listings, enable communications between users (e.g., connecting property seekers with agents), provide customer support, and fulfill our contractual obligations to you.
Lawful Basis: The processing is necessary for the performance of a contract to which you are a party.
Data Used: Account Registration data, User Profile Information, Property Listing Data, Communications.
Purpose: To understand and analyze how you use our Service, monitor and analyze trends, and gather demographic information. This allows us to improve our website's features and functionality, personalize your experience by showing you more relevant search results and content, and develop new products and services.
Lawful Basis: We process this data based on our legitimate interests in operating and enhancing our business and providing a better user experience, provided these interests are not overridden by your data protection rights.
Data Used: Log and Usage Data, Cookies and Tracking Technologies.
Purpose: To protect our Service, our users, and the public from security threats. This includes detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, fighting spam, and ensuring the integrity of our platform.
Lawful Basis: We process this data based on our legitimate interests in securing our platform and protecting our business and users from harm.
Data Used: Log and Usage Data, Account Registration data.
Purpose: To send you updates, newsletters, promotional materials, and other information relating to our Service.
Lawful Basis: We will only send you direct marketing communications where we have your explicit consent. This is typically obtained via an unchecked opt-in box during registration or in your account settings. You have the right to withdraw your consent at any time by using the "unsubscribe" link in our emails or by contacting us directly.
Data Used: Name, Email Address.
We are committed to maintaining your trust, and we do not sell or rent your personal data to third parties for their marketing purposes. We only share your information in the limited circumstances described below, with trusted service providers who are contractually obligated to protect your data and use it only for the purposes we specify. These providers act as 'data processors' on our behalf, unless otherwise stated.
Our Service is hosted on Amazon Web Services (AWS), a leading cloud infrastructure provider. All of our platform data, including your personal data, is stored on AWS servers located in the United States (specifically, the us-east-1 region). AWS acts as a data processor on our behalf, providing the secure infrastructure on which our Service operates. Our relationship with AWS is governed by the AWS Data Processing Addendum (DPA), which includes robust security, confidentiality, and data protection terms compliant with GDPR.
We use Cloudflare, Inc. to enhance the security, performance, and reliability of our website. Cloudflare provides services such as a Content Delivery Network (CDN), protection against Distributed Denial of Service (DDoS) attacks, and other security features. To provide these services, Cloudflare processes network traffic data, which includes visitor IP addresses. In this capacity, Cloudflare acts as a data processor on our behalf. Our use of Cloudflare is governed by their Data Processing Addendum (DPA), which contractually binds them to protect the data they process for us.
We use Iyzico as our third-party secure payment gateway to process payments for subscriptions and premium services. When you make a purchase, you provide your payment information directly to Iyzico through a secure connection. In this relationship, Kıyanus acts as the 'data controller' and the direct seller of the service, while Iyzico acts as the 'data processor' for your payment information.
This means we are legally responsible for the service you purchase, but Iyzico is responsible for securely handling and processing your payment details in a PCI DSS compliant manner. We do not collect, access, or store your full payment card details on our servers. Following a successful transaction, Iyzico provides us with a confirmation token and transaction details (such as your name, email, and the last four digits of your card) necessary for us to fulfill your order. We strongly encourage you to review Iyzico's Privacy Policy to understand their data practices. This structure ensures that your sensitive financial data is handled with the highest level of security by a specialized payment processor.
We may disclose your personal data if we are required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency). We may also disclose your information in the good faith belief that such action is necessary to comply with a legal obligation, to protect and defend our rights or property, to prevent or investigate possible wrongdoing in connection with the Service, or to protect the personal safety of our users or the public.
In the event that Kıyanus is involved in a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or in the uses of your personal data, as well as any choices you may have regarding your personal data.
As a global service with users and service providers located around the world, your personal data may be transferred to, stored, and processed in countries other than your own. Our company is based in Turkey, and our primary data hosting infrastructure, provided by AWS, is located in the United States (Region: us-east-1). Our security provider, Cloudflare, is also a U.S.-based company.
When we transfer personal data from the European Economic Area (EEA), the UK, or other regions with comprehensive data protection laws to countries that have not been deemed to provide an adequate level of data protection (like the United States), we take specific steps to ensure that your data is protected. We rely on the following legal mechanisms and safeguards for such transfers:
Standard Contractual Clauses (SCCs): Our Data Processing Addenda with key service providers, including AWS and Cloudflare, incorporate the European Commission's Standard Contractual Clauses. The SCCs are a legally binding contractual tool that requires the data importer (the service provider in the U.S.) to implement technical and organizational measures to ensure that the transferred data receives a level of protection equivalent to that provided under GDPR. This is the primary mechanism we use to ensure the lawfulness and security of data transfers outside the EEA.
Adequacy Decisions: In some cases, we may transfer data to countries that the European Commission has deemed to provide an "adequate" level of data protection. Additionally, we may rely on frameworks like the EU-U.S. Data Privacy Framework if our service providers are certified under it, providing another layer of assurance for data transfers to the U.S..
By using these safeguards, we ensure that your personal data remains protected in accordance with high international standards, regardless of where it is processed.
We are committed to protecting the security of your personal data. We have implemented appropriate technical and organizational security measures designed to protect the information we process from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:
We adhere to the GDPR's principle of "storage limitation," which means we will retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected. This includes retention for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the following criteria:
For example, we will retain your account information for as long as your account is active with us. If you decide to close your account, we will delete or anonymize your personal data in accordance with our internal policies, unless we are required to retain it for a longer period to comply with legal obligations or to resolve disputes.
In accordance with the GDPR and other applicable data protection laws, you have certain rights regarding your personal data. We are committed to upholding these rights and extend them to all our users globally, wherever feasible. Your rights include:
If you wish to exercise any of the rights set out above, please contact us at [email protected]. We will respond to your request in accordance with applicable data protection laws, typically within one month of receipt. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data.
You have the right to lodge a complaint with a data protection authority (also known as a supervisory authority) if you believe that our processing of your personal data infringes applicable law. For users in the EEA, you can find your local supervisory authority's contact details here: https://edpb.europa.eu/about-edpb/board/members_en.
displayCurrency) so it persists across visits. These are functional and set only in response to your actions; they do not track you.fx_rates_cache_v1, which contains only public exchange rates and your detected currency, not personal data). Converted prices are indicative and update daily; the original listed price and currency remain the definitive amount. You can override the detected currency at any time using the currency selector.When you first visit our website, we present a consent prompt asking for your explicit permission to place analytics cookies on your device. You can choose to accept or decline. If you accept, we enable analytics data collection including Google Analytics and listing visitor insights. If you decline, no analytics cookies are set and no visitor analytics data is collected. Anonymous view counts (which do not collect any personal data) continue to function regardless of your choice.
Your consent choice is stored locally on your device. You can reset your preference at any time by clearing your browser's cookies and local storage for our website, after which the consent prompt will appear again on your next visit.
Most web browsers also allow some control of cookies through the browser settings. However, if you use your browser settings to block all cookies (including essential cookies), you may not be able to access all or parts of our Service.
To help sellers and agents understand how their property listings perform, we operate a privacy-friendly, cookie-free analytics system on individual listing pages. This system does not use cookies, does not identify you, and does not track you across sessions.
Each listing view generates a short-lived (24-hour), irreversible cryptographic hash derived from your IP address, browser user-agent, and a daily-rotating server-side salt. This hash is used solely to count unique visitors and prevent duplicate counting within a 30-minute window. It cannot be linked back to your identity, and it is replaced daily with a completely new, unrelated hash.
We store only aggregate, non-identifying information: approximate country and city (from IP geolocation, the IP itself is discarded), device type (mobile/desktop/tablet), browser family (Chrome/Safari/etc.), and referrer category (search/social/direct). Under GDPR Recital 26, this processed data qualifies as anonymous and does not require consent.
Automated traffic (search engine crawlers, social media preview bots, uptime monitors, AI scrapers) is filtered out and not counted.
Our Service is not intended for, nor designed to attract, individuals under the age of of 18. We do not knowingly collect personally identifiable information from any person under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to remove that information from our servers.
We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes.
If you have any questions, comments, or concerns about this Privacy Policy or our data protection practices, please do not hesitate to contact us.
Data Controller: Kıyanus Ltd. Şti.
Legal Address: İhsaniye, Millet Cd. No:31/A, 42040 Selçuklu/Konya, Turkey
Email for Privacy Inquiries: [email protected]