1. Our role
Experify provides businesses with an AI assistant that answers their customers' messages and helps complete bookings, purchases or other requests across the business's own channels (website, WhatsApp, Instagram and others). For customer data handled through these channels, the business is the data controller and Experify acts as a data processor on the business's behalf, following the business's instructions and this policy. For visitors to our own website, Experify is the controller.
2. Data we process
- Information you provide us: when you request a demo, complete a setup form or contact us, such as your name, business name, email, phone number, and the business information you send.
- Customer conversation data: the content of messages a customer sends to a business via WhatsApp, Instagram, the website widget or phone, and the assistant's replies.
- Customer contact/profile data: the customer's name or username and the phone number or social handle they use to message, as provided by the messaging platform.
- Transaction & booking data: details the customer shares to make a booking, purchase or request.
- Technical data: IP address, device and browser type, approximate location and usage information collected automatically when you use our website.
3. How and why we use data
We use personal data to provide, operate and set up the AI assistant for our business clients; respond to your questions, demo requests and setup submissions; keep our services secure, reliable and performant; improve our products and build new features; and comply with our legal obligations. We use customer conversation data only to power the business's assistant, never for advertising, profiling for third parties, or resale.
4. Legal bases (KVKK / GDPR)
We process personal data where it is necessary for the performance of a contract, where we have a legitimate interest, where it is required by law, or, where necessary, based on your explicit consent. You may withdraw consent at any time.
5. WhatsApp, Instagram & Meta platforms
Our service integrates with Meta's WhatsApp Business Platform and Instagram. When a customer contacts a business via WhatsApp or Instagram, the message content is processed so the AI assistant can generate a reply on the business's behalf. This processing is also subject to Meta's own terms and privacy policy. We use this data solely to provide the assistant service and do not use WhatsApp or Instagram message content for advertising.
6. Service providers
We rely on a limited number of trusted service providers who process personal data on our behalf under appropriate agreements and only on our instructions. These include cloud hosting and infrastructure, email delivery, the AI model providers that generate the assistant's replies, and messaging platforms such as Meta's WhatsApp Business Platform.
7. Who we share data with
We do not sell personal data. We share it only with the service providers described above, with the business the assistant works on behalf of, and where necessary to comply with law, enforce our terms, or protect the rights and safety of our users.
8. International transfers
Some of our service providers may process data outside Turkey. Where personal data is transferred abroad, we take the steps required under KVKK and GDPR to keep it protected, including obtaining explicit consent where necessary or relying on applicable safeguards.
9. Retention
We keep personal data only as long as needed to provide our services, fulfil the purposes described in this policy, and meet our legal obligations. When data is no longer needed, we delete or anonymise it. Businesses may configure shorter retention or request deletion at any time.
10. Your rights & data deletion
Under KVKK (Article 11) and GDPR you may: learn whether your personal data is processed and request information about it; learn the purpose of processing and whether it is used accordingly; request correction of incomplete or incorrect data; request deletion or erasure of your data; object to outcomes produced solely by automated analysis; restrict or object to processing and request portability or lodge a complaint with a supervisory authority; and seek compensation for damage caused by unlawful processing.
To exercise any of these rights, including requesting deletion of your data, email yigit@experify.ai with your request and the phone number or handle you used. We respond to and action verified requests within 30 days. Businesses may also request deletion of their customers' data on their behalf.
11. Cookies
Our website uses only the cookies and similar technologies needed to run the site, remember your language preference and keep it secure. We do not use them for advertising.
12. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, and limit access on a need-to-know basis. No method of transmission or storage is completely secure, but we work to protect your information with industry-standard safeguards.
13. Children
Our service is intended for businesses and their adult customers and is not directed at children. We do not knowingly collect personal data from children.
14. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. We recommend reviewing it periodically.
15. Contact
Experify — BOTERA YAZILIM TEKNOLOJİLERİ LİMİTED ŞİRKETİ
İdealtepe Mah. Dik Sk. No:13 İç Kapı No:2, Maltepe / İstanbul, Türkiye
yigit@experify.ai · experify.ai