Privacy Policy

Version 1.0 · Effective date: 17 October 2026

This English text is a translation of the Turkish original. If the two differ, the Turkish text prevails, without limiting any rights you have under laws that cannot be set aside by agreement.

Scope: This policy applies to everyone who visits the zolpix.com website, creates an account, places an order or writes to us through our support or contact channels. The statutory information on the legal grounds on which your personal data are processed is in the Personal Data Processing Notice; cookies are explained separately in the Cookie Policy. Additional information for those who use the site from the European Union or the European Economic Area is in section 11.

In brief

We collect only the data our business needs: your email address and target link for your order, your name and account details if you have an account, and payment records to verify your payment.
We never ask for or store your social media password, verification code, card number or CVV.
The site has no advertising or tracking cookies, no third-party analytics and no social media tracking code.
We do not sell your data. We share only what is needed, and only with the service providers needed to deliver your order, take your payment, send email and run the site.
You can ask at info@zolpix.com for your account to be closed, or for access to, correction or deletion of your data.

1. Data controller

The controller of the data processing activities in this policy is the following business, which operates the zolpix.com website ("Zolpix", "we").

Trade name: zolpix L.T.D.Ş
Address: Şile, İstanbul, Türkiye
Privacy and personal data requests: info@zolpix.com

2. Data we never collect

The passwords of your social media accounts, verification codes or authority to sign in to your account. Only a public link is needed for the service. If you receive a message asking for your password, be aware that it did not come from Zolpix.
Card number, expiry date and security code (CVV). These are entered on the payment page of the contracted payment institution.
Advertising identifiers and tracking data that build a profile of the pages you visit on the site. We do not store or analyse the words you type in the site search as a search history.
Who you are when you vote in the "Was this article helpful?" poll on help articles. Only totals are kept for this poll.

3. Data we collect

When you browse: your IP address and browser information in session and security records; your language, currency, cart and cookie preferences in cookies.
When you place an order: your email address (for guest purchases), the service and package you chose, the target account or content link, the amount, the payment method and the version of the contract texts you accepted at the time of the order.
When you pay: the payment institution's transaction reference and the payment status; for bank transfers (havale/EFT), the sender's name, the masked sender IBAN, the amount, the date, the transfer description and, if you upload one, the transfer receipt.
When you create an account: your name, your email address, an irreversible digest of your password, your preferences, your marketing email permission, your balance transactions and your active sessions.
When you write to us: what you write in support tickets, live support or the contact form and the files you attach; in live support, the name and email address you choose to leave.

4. Why we use your data

To take and deliver your order, to notify you of its status and to let you track it.
To take and verify your payment and, where necessary, to refund it.
To manage your account, your balance and your support tickets.
To answer your questions.
To protect the site, your account and payments against fraud and misuse.
To meet our obligations under accounting, tax and consumer legislation.
To send marketing emails, only if you have given permission.

We do not use your data for any purpose incompatible with these; we do not carry out profiling or automated decision-making.

Hosting provider: the servers on which the site runs.
Contracted payment institution: taking and refunding card payments.
SMM service providers: for the delivery of your order, only the target link, quantity, service code and order reference. Your name, email address and IP address are not passed on.
Email delivery service provider: the transactional emails we send you.
NVIDIA Corporation (USA): only while the AI assistant is active in live support, the most recent messages of the conversation, after information in them such as email addresses, phone numbers, card numbers and IBANs has been automatically removed (details and limits in Annex 1 to the Personal Data Processing Notice).
Banks, accountants and legal advisers: only when necessary and only to the extent necessary.
Competent public authorities and courts: only when there is a lawful request.

We give these recipients only the data needed for the purpose stated above. The hosting provider and the email delivery service provider process your data on our behalf and on our instructions. The payment institution and banks may also process the data under their own responsibility for their own legal obligations. The purposes for which and the period for which NVIDIA will process the data will be added to Annex 1 to the Personal Data Processing Notice before the assistant is activated.

6. International transfers

While the AI assistant in live support is active, conversation content is transferred to NVIDIA Corporation in the USA. This transfer is made by signing the standard contract published by the Personal Data Protection Board under Article 9 of the KVKK and notifying the Board; the assistant is not activated before this contract is signed. If any of our other service providers is located abroad, the transfer will be made only with the appropriate safeguards under Article 9 of the KVKK, and this policy and the Personal Data Processing Notice will be updated with the country information.

7. Retention periods

Order, payment, refund, balance and bank transfer records and transfer receipts: 10 years from the end of the year to which the record relates (statutory retention period).
The target link in an order: 3 years; after that, only the platform's domain name is kept.
Account details: for as long as you have an account; your account is closed no later than 30 days after your request to close it.
Support tickets: 3 years from closure. Live support conversations: 180 days from the last message. Contact form messages: 1 year.
Error and security logs: 14 days. Activity (audit) records: 3 years.

Data whose retention period has expired are deleted or anonymised in a periodic destruction run carried out at least every 6 months. The detailed list is in section 7 of the Personal Data Processing Notice.

8. How we protect your data

The connection between you and the site is encrypted with HTTPS.
Passwords are stored in irreversible form (hash). Password reset, email change and guest order tracking links are kept in the system only as security digests.
A payment is treated as "paid" only on the basis of a notification from the payment institution whose signature has been verified, or of a server-side query to the payment institution.
Our staff access only the data they need for their role, with role-based permissions. In the administration panel, customer details are masked by default; permission to reveal the full details is limited, and every reveal is logged.
Transfer receipts and support attachments are stored under random names in an area that cannot be accessed directly from the internet and are shown only to authorised persons.
Sensitive operations and sign-in attempts are rate-limited and logged.

No system can provide complete security. If a breach affects your data, we will notify the Personal Data Protection Board and you in accordance with Article 12 of the KVKK.

9. Marketing emails

We send marketing emails only if you give explicit permission. The permission box is not pre-ticked. You can withdraw your permission at any time in the "Communication preferences" section of your account settings or through the link in every marketing email. Transactional emails such as order confirmations, order tracking, password resets and support replies are not marketing messages and are sent regardless of your permission.

10. Your rights and closing your account

You can exercise your rights under Article 11 of the KVKK (to request information, access, rectification, erasure, to learn the recipients to whom data have been transferred, to object, and to claim compensation for damage) through the channels in section 9 of the Personal Data Processing Notice. We answer your request free of charge within 30 days at the latest.

You can ask for your account to be closed by writing to info@zolpix.com from your registered email address. If there is unused balance in your account, it is refunded under the procedure in the Refund and Cancellation Policy. Order and payment records still subject to a statutory retention period are kept for that period; the other information relating to your account is deleted or anonymised.

11. Users in the European Union and the European Economic Area

If you use the site from the European Union (EU) or the European Economic Area (EEA) and we provide services to you, the General Data Protection Regulation (GDPR, 2016/679) may also apply to the processing of your data. In that case:

Legal bases: performance of a contract (GDPR Art. 6(1)(b)) — orders, payment, account and support; legal obligation (Art. 6(1)(c)) — accounting and tax records; legitimate interests (Art. 6(1)(f)) — security, fraud prevention, answering questions, the first reply by AI in live support; consent (Art. 6(1)(a)) — marketing emails and non-essential cookies.
Your rights: the rights of access, rectification, erasure, restriction of processing, data portability and the right to object to processing based on legitimate interests (GDPR Arts 15–21). Where processing is based on consent, you can withdraw your consent at any time; this does not affect the lawfulness of processing before the withdrawal.
Requests: You can send your requests to info@zolpix.com. We reply within one month at the latest; because of the complexity or number of requests, this period may be extended by two further months, and we will tell you so within the first month.
Complaints: You can lodge a complaint with the data protection supervisory authority in the EU country where you live, where you work or where you believe the infringement took place. In Croatia, this authority is the Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP).
International transfers: Zolpix operates in Türkiye; Türkiye is not among the countries for which the EU has adopted an adequacy decision. While the AI assistant is active, conversation content is also transferred to the USA. Where your data are transferred outside the EU/EEA, the appropriate safeguards provided for in Chapter V of the GDPR (e.g. the European Commission's standard contractual clauses) are applied.
Automated decision-making: Within the scope of GDPR Art. 22, we do not make decisions based solely on automated processing that produce legal effects concerning you.
Mandatory information: Your email address and the target link are required to place an order, and a name, email address and password are required to create an account; without them, an order or an account cannot be created.

12. Children

Our services are not intended for persons under 18, and we do not knowingly collect data from them. If we learn that a person under 18 has sent us data, we will ensure that those data are deleted.

13. Links to other sites

Our site and orders contain links to social media platforms. These platforms are not affiliated with Zolpix; their own privacy policies apply.

14. Changes

We update this policy when our data processing activities or the legislation change. The current version is published on this page with its version number and effective date.