Privacy Policy

This Privacy Policy explains how SmartCon360 ("SmartCon360", "we") collects, uses, stores and protects your personal data when you use the smartcon360.com platform and related services (the "Service"). By using the Service you agree to this policy.

1. Who we are & contact

SmartCon360 is the data controller. For any request relating to this policy, your data or your rights, contact us at contact@yukselarslan.com.

2. Data we collect

• Account information: email address, name, and optionally company name and profile picture. When you sign in with Google, this information (name, email, profile picture and account ID) is provided by your Google account.
• Authentication data: if you register with a password, it is stored only in hashed form; we never see your plaintext password.
• Project & content data: the project, planning, takt, cost, quality, field and similar operational data you enter, along with files and photos you upload.
• Usage & technical data: session information, IP address, browser/device type and basic usage logs (for security and to improve the Service).
• Google Drive data (optional): only if you use the "Connect Google Drive" feature. With the drive.file scope we access only the files the app creates or that you explicitly select. We do not read the rest of your Drive.

3. How we use data

• To create your account, authenticate you and manage your session.
• To provide the core features of the Service (planning, reporting, document generation, etc.).
• To communicate with you about the Service (notifications, support).
• To secure the Service, prevent abuse and improve performance.
• To meet our legal obligations.

We do not use your data to show you ads and we do not sell your personal data.

4. Google user data — Limited Use

SmartCon360's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In short:

• We use your Google account and Drive data only to provide user-facing features.
• We do not use this data for advertising, and we do not sell it or transfer it to third parties.
• We do not allow humans to read it, except with your explicit consent, for security, or where required by law.
• You can revoke Drive access at any time from your Google account settings.

5. Data sharing & service providers

To run the Service we work with a small number of trusted subprocessors:

• Vercel — application hosting and delivery.
• Neon — managed PostgreSQL database.
• Google — authentication and, only when you choose, Drive integration.

We do not otherwise share your data with third parties, except where required by law in accordance with applicable regulations.

6. Retention & security

We retain your data for as long as your account is active and as required by our legal obligations. Data is encrypted in transit (HTTPS/TLS); development and production environments are isolated with separate databases and separate secrets. While no method of transmission is 100% secure, we take reasonable technical and organizational measures to protect your data.

7. Your rights (GDPR / KVKK)

Under applicable law you have the right to:

• Access your data and request a copy,
• Request correction of inaccurate or incomplete data,
• Request erasure of your data (right to be forgotten),
• Object to and restrict processing,
• Receive your data in a portable format.

To exercise these rights or request deletion of your account, simply write to contact@yukselarslan.com.

8. Cookies & session

We use strictly necessary cookies/local storage to keep you signed in and provide core functionality. These are not used for marketing or tracking.

9. Changes

We may update this policy from time to time. For significant changes we will update the "Last updated" date on this page and notify you where appropriate.