Skip to content
Book a meeting

Legal

Privacy Policy

This policy covers the avencrea.com website, the contact and live support tools on the site, and the Avencrea ADS application we use to manage Google Ads accounts. Here you can find out which data we process and why, who we share it with, and your rights under the Turkish Personal Data Protection Law No. 6698 (KVKK).

Last updated: 22 October 2026

Data controller

Your personal data is processed, in the capacity of data controller, by the sole proprietorship Muhammed Salih Karataş, operating under the Avencrea brand (“Avencrea”, “we”; Fenerbahçe Mah. İğrip Sk. No:13 D:1, Kadıköy / İstanbul). For any questions or requests regarding this policy, you can contact us at info@avencrea.com.

What data do we process?

Meeting and contact requests

When you fill in the meeting scheduling form, we receive your full name, email address, company name, phone number, the topic of the meeting, your preferred date and time, and any notes you add.

Live support

When you use the chat window on the site, your name, phone number, country, the messages you write and a random visitor ID generated in your browser are processed. This ID allows your conversation to continue where it left off when you refresh the page.

Usage and device data

We use Microsoft Clarity to understand how you use the site. Clarity collects the pages visited, clicks and scrolling, session recordings, device and browser information, and approximate location derived from your IP address. Our servers also keep technical logs, such as IP address, browser information and the time of each request, for security purposes.

Google user data

If you authorise the Avencrea ADS application with your Google account, we access your Google Ads data. Details are in the Google user data section.

Purposes and legal grounds

  • Responding to your requests and preparing quotes: meeting and chat data are processed in order to take the steps necessary for entering into a contract (KVKK Art. 5/2(c)).
  • Providing our services: managing our clients’ Google Ads accounts is necessary for the performance of the contract between us (KVKK Art. 5/2(c)).
  • Improving the site and keeping it secure: usage data and server logs are processed on the basis of our legitimate interest, provided that this does not harm your fundamental rights and freedoms (KVKK Art. 5/2(f)).
  • Legal obligations: keeping the records required by legislation and responding to requests from competent authorities (KVKK Art. 5/2(ç)).

We do not sell your data, and we do not use data relating to you to build advertising profiles.

Google user data

Avencrea ADS is an application operated by Avencrea, the sole proprietorship of Muhammed Salih Karataş (Istanbul, Türkiye), which Avencrea uses to manage its own Google Ads accounts and those of its clients. When a user signs in with a Google account and grants permission, it accesses the Google Ads API with the https://www.googleapis.com/auth/adwords scope.

Data accessed

  • IDs, names, currency and time zone of the Google Ads accounts that the authorising account can access
  • Campaign, ad group, keyword, ad and search term information
  • Performance metrics such as impressions, clicks, cost and conversions
  • Budget, bidding strategy, location targeting and language targeting settings

How it is used

This data is used solely to report on the ads in those accounts and to create and manage campaigns (e.g. pausing a campaign or updating a budget or keywords) at the account owner’s request. New campaigns are created paused; every change that starts spending is made with the account owner’s approval. During analysis and campaign preparation, the data may be processed by our AI-powered assistant.

Storage and sharing

  • Google Ads data is read when needed; it is not stored permanently in a separate database. The OAuth token required for access is kept only on authorised team devices, with restricted access.
  • Google user data is not sold, is not used for advertising or ad targeting, and is not used, or transferred, to train generalised AI or machine-learning models.
  • The data is not shared with third parties except with the infrastructure providers needed to provide the service, to prevent security breaches, or where required by law. Our team views this data only at the account owner’s request, or for security, legal compliance or support purposes.

Revoking access

You can revoke the permission you granted to Avencrea ADS at any time on the Google Account permissions page (myaccount.google.com/permissions). You can also request deletion of the token and related records by writing to info@avencrea.com.

Avencrea ADS’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who do we share data with?

We share your data only with providers that help us deliver our services, and only to the extent necessary for the relevant purpose:

  • Our server and hosting provider: publishing the site and technical logs
  • Supabase: live support messages and customer relationship records
  • Microsoft (Clarity): site usage analytics
  • Google (Google Ads API): management of the advertising accounts we have been authorised to access
  • Our AI service provider: analysis of advertising data and campaign preparation

Some of these providers have their servers outside Türkiye. Transfers abroad are carried out in accordance with Article 9 of KVKK. Where required by law, data may also be shared with competent public authorities and institutions.

Cookies and browser storage

Microsoft Clarity places cookies in your browser (e.g. _clck, _clsk) to link visits together. The live support window keeps your visitor ID, the contact details you enter and the time of the last read message in your browser’s local storage. You can delete this information or block cookies in your browser settings; in that case, your chat history will not appear on your device.

Retention and security

We keep your personal data for as long as the purpose for which it is processed requires, and until the retention periods set out in the relevant legislation have expired. When that period ends, the data is deleted, destroyed or anonymised. We limit access to the data to authorised team members, use encrypted connections (HTTPS) for transmission, and keep access credentials only on the systems that need them.

Your rights under KVKK

Under Article 11 of KVKK, you have the right to:

  • Learn whether your personal data is processed and, if it is, request information about it
  • Learn the purpose of the processing and whether the data is used in line with that purpose
  • Know the third parties in Türkiye or abroad to whom the data is transferred
  • Ask for the data to be corrected if it is incomplete or inaccurately processed
  • Ask for the data to be erased or destroyed under the conditions set out in Article 7 of KVKK
  • Ask for corrections and erasures to be notified to the third parties to whom the data has been transferred
  • Object to an outcome against you that results from the data being analysed exclusively by automated systems
  • Claim compensation for any damage you suffer as a result of unlawful processing

You can send your requests to info@avencrea.com. We will conclude your application within 30 days at the latest. If you are not satisfied with our response, you can file a complaint with the Turkish Personal Data Protection Board.

Changes and contact

We may update this policy as our services or the legislation change. The current version is always published on this page, with the date at the top. For questions: info@avencrea.com