Skip to content
Request early access

Draft, not reviewed by a lawyer. This text is not binding until a lawyer has reviewed it. It is an English summary of our Turkish draft texts (Gizlilik and KVKK aydınlatma metni); where they differ, the Turkish drafts are the reference.

Privacy

Privacy and data

How we treat data on this website, in the live demo and in the Zahter panel, in plain language. Zahter is based on Turkish law: KVKK, Law No. 6698 on the Protection of Personal Data. This page makes no claim about other regimes such as the EU GDPR.

This website

  • No cookies, no tracking. We use no analytics tool, ad pixel or third-party tracker.
  • Fonts load from Google Fonts. When they do, your browser sends Google your IP address and browser details.
  • The form sends nothing. The contact form prepares a message in your own email app; you decide whether to send it.
  • Server logs. The infrastructure that serves this site may keep short-lived request logs for security. The provider is not yet named here.

The live demo

The demo opens with a sample restaurant. Changes you make are stored in your browser's local storage and are not sent to us. Please don't enter real people's data in the demo.

The Zahter panel and guest data

When a restaurant uses Zahter, the guest cards, reservations and visit records belong to the restaurant: the restaurant is the data controller and Zahter is the data processor. Guests should send requests about their data to the restaurant first. The panel supports this with these rules:

  • A guest card can't be opened until the team marks that the guest has been informed how their data is used.
  • Marketing consent (the consent Turkish law requires for commercial messages, tracked nationally through İYS) is kept separately. Campaigns only reach guests who opted in.
  • A guest who replies "DUR" (Turkish for STOP) on WhatsApp, or uses the unsubscribe link in an email, has their consent withdrawn automatically.
  • If a guest asks, their card is deleted; past visits remain in revenue without a name.
  • The guest page never shows whether a phone number is on file.
  • Each role sees only the information its job needs.

Today panel data is kept in the browser and role rules are applied in the browser. A data server, server-side permission checks and anonymising data after its retention period are in progress; this text will be updated when they go live.

When you write to us

If you email us or request early access, Zahter is the data controller for that data. We process:

  • Identity and contact: name, email address, phone if you give it.
  • Business details: restaurant name, city, rough table count, anything you share in your message.
  • Technical data: IP address and browser details processed by the infrastructure serving this site and by Google Fonts.

We use it to answer your questions and early-access request, and to run the site securely. We send marketing emails only if you separately agree. Some infrastructure providers are outside Turkey; the legal basis for that transfer under KVKK is still to be set. Company details, providers and retention periods are not filled in yet in the Turkish draft either.

Your rights

Under Article 11 of KVKK you can ask whether your data is processed, request information, correction or deletion, learn who it was shared with, object, and claim compensation for damage. Write to merhaba@zahter.app; we reply within 30 days at the latest.

Changes

If this policy changes, the new version is published on this page with its date.

Draft date: 1 November 2026.