Development preview — these notices will be reviewed against final data flows, retention periods and supplier agreements before launch.
Privacy notice
This page explains the current data processing scope of the marketing site and the social media management service in development.
Last reviewed: September 19, 2026Controller and contact
The service operator is Sarikaya It-Firma, Norway, organisation number 929019202. Use the email below for privacy and rights requests. Controller/processor roles and the agreement for content processed on behalf of customers must be finalised before launch.
Data processed
The application may process account and contact details; connected social account identifiers, profiles, authorisation tokens, content and available performance metrics; uploaded media, reports and operational records. Access depends on the platform and permissions you grant. Visiting the marketing site does not grant access to your social accounts.
Purposes and legal grounds
Contract formation or performance is considered for processing necessary to provide requested connections, content creation, publishing and reporting. Legitimate interests are considered for security and abuse prevention, and legal obligation for statutory records. Optional tracking requires prior, separate consent. Each data flow and its legal basis will be documented before launch.
AI and service providers
When you use AI features, relevant prompts, selected content or analysis data may be sent to Google Gemini to generate a response. Avoid unnecessary private or sensitive information in prompts. Google’s processing terms depend on the service and account conditions; we do not make a blanket promise of zero retention or no model training. The final hosting, backup, email, payment and subprocessor list, and safeguards for transfers outside the EEA, will be disclosed before launch.
Contact form messages
The form collects your name, email address, optional subject and message. Messages are kept in an administrator inbox capped at 1,000 records until an administrator deletes them. When the inbox is full, new messages are not stored and you will be directed to email support. A copy is sent through SMTP to the support address so we can respond.
Retention and security
Connection tokens and stored Gemini keys are encrypted on the server. Contact messages follow the retention and capacity rule above. Exact retention and deletion schedules for media, reports, raw platform data, logs and backups are not yet fully implemented. Data should not be retained longer than necessary for its purpose; justified exceptions for legal obligations or disputes must be documented.
Your rights and deletion
Where applicable, you may request access, correction, deletion, restriction and portability, object to processing and withdraw consent for consent-based processing. Contact the address below; secure identity verification may be needed. Disconnecting a social account does not delete all stored data or posts on that platform. You may complain to the Norwegian authority Datatilsynet.
Platform scope and changes
Instagram/Facebook integrations are available; Threads awaits live validation. YouTube/TikTok/X integrations are not enabled yet. Data scope, permissions, platform terms and this notice will be updated before new integrations are enabled. This development preview is not intended for children or special-category data processing; age eligibility will be established before launch.
Contact and privacy requests
Sarikaya It-Firma · Norway
Organisation number: 929019202