Draft: legal review needed. A lawyer must approve this before launch.
Privacy notice (KVKK)
Version 2026-10-31
1. Data controller
SonicMaps (sonicmaps.app) is operated by Pivony, Inc. (2093 Philadelphia Pike #4590, Claymont, Delaware 19703, USA). Pivony, Inc. is the data controller under Turkey's Personal Data Protection Law No. 6698 ("KVKK"). Questions and requests: hello@sonicmaps.app.
2. What data we process
Identity: name. Contact: mobile number, optional email. Booking details: business, service, date and time, the staff member if you chose one, booking status. Membership and reviews: the reviews and ratings you write. Security: session records, phone verification records and technical records against abuse (raw IP addresses are not stored; they are processed as hashes). Marketing: your contact preference, only if you agreed. Analytics: only if you accepted analytics cookies, how you use the site (pages viewed, device and browser type, approximate location). For business users: account email, sign-in details and business profile details. With online payment your card details never reach SonicMaps; you enter them on the payment provider's page.
3. How we collect it
Electronically and partly automatically: through the site's forms (booking, membership, reviews, business sign-up), cookies and similar technologies, the booking system of the business you book, and AI assistants (e.g. ChatGPT) that book for you at your request.
4. Purposes and legal bases
Making your booking, passing it to the business, reminding you and letting you manage your bookings (performance of a contract, KVKK art. 5/2-c); running reviews and the verified-visit badge (contract and legitimate interest, art. 5/2-f); preventing fake bookings, spam and abuse and keeping systems secure (legitimate interest and legal obligation, art. 5/2-ç and f); meeting legal obligations (art. 5/2-ç); sending you offers and suggestions (only with your explicit consent, art. 5/1); analytics to improve the site (only with your consent to analytics cookies).
5. Who we share it with
What a booking needs (name, phone, email if given, booking details) goes to the business you book and its booking system (Sonic, by Pivony). Suppliers that help run the service: hosting and infrastructure (Google Cloud), email delivery (Resend), business sign-in and bot protection (Google Firebase, Google reCAPTCHA), analytics (Google Analytics, only with your consent), and the payment provider for online payments. Authorities may receive data where the law requires. We never sell your personal data.
6. Transfers abroad
Our servers and some suppliers are outside Turkey, mainly in the USA. Transfers abroad rely on KVKK art. 9: standard contracts with suppliers and, where needed, your explicit consent (e.g. analytics cookies).
7. Retention
Unverified phone records are deleted after 7 days and temporary records (verification codes, sessions and sign-in links) within 30 days. Booking, membership and review records are kept while the service relationship lasts and then for statutory limitation periods, after which they are deleted or anonymized. Analytics data is kept in Google Analytics for at most 14 months.
8. Your rights
Under KVKK art. 11 you may learn whether and why your data is processed and who receives it, ask for incomplete or wrong data to be corrected, ask for deletion, object to a result against you from automated analysis and claim compensation. Write to hello@sonicmaps.app; we answer within 30 days. If you ask for deletion, your reviews are anonymized rather than deleted. You may also complain to the Personal Data Protection Authority.