Privacy Policy

1. Introduction

This Privacy Policy explains how TableTalk.ai collects, processes, and protects personal data in accordance with data protection regulations applicable in Turkey (KVKK), the European Union (GDPR), and the United States (CCPA, where applicable).

2. Jurisdiction-Specific Compliance

• Turkey: Personal data is processed in accordance with Law No. 6698 on the Protection of Personal Data (KVKK).
• EU: We adhere to the principles and legal bases outlined under the General Data Protection Regulation (GDPR).
• US: Where applicable, we comply with the California Consumer Privacy Act (CCPA) and similar state-level laws.

3. Categories of Data Collected

• Identity and contact information (name, phone number, email)
• Interaction data (reservations, call logs, inquiries)
• Usage and system data (IP addresses, time stamps, integrations)
• Recordings and transcriptions for training and analytics

4. Purpose and Legal Basis

• Contractual necessity: To provide the services you request
• Legal obligations: To comply with national laws
• Legitimate interest: To improve performance and service
• Consent: Where required, especially for marketing or third-party data

5. Data Transfers and Storage

Data may be transferred outside of your country to secure cloud infrastructure hosted in the EU or the US. We apply appropriate safeguards such as Standard Contractual Clauses (SCCs), Business Associate Agreements (BAAs), or cross-border compliance commitments under KVKK where required.

6. Retention

Data is retained only for as long as necessary to fulfill service obligations or legal requirements in each jurisdiction. Clients may request early deletion in writing.

7. Your Rights

• Turkey (KVKK): Right to be informed, access, rectify, erase, and object
• EU (GDPR): Right to access, rectify, erase (right to be forgotten), restrict processing, data portability, object, and withdraw consent
• US (CCPA): Right to know, delete, and opt-out of data sale (we do not sell data)