Privacy Policy

1. Introduction

Jans Trade, LLC ("We", "Us", "Platform") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our SaaS platform.

By using this platform, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not access or use our Services.

2. Data We Collect

We collect specific types of data required to provide our real estate management services:

• Identity Information: Name, surname. For Turkish citizens, Turkish ID Number (T.C. Kimlik No) is collected but strictly **encrypted client-side** before storage.
• Contact Information: Phone number, email address.
• Authentication Data:
  • If you sign up via Email: Encrypted password (managed by Supabase Auth).
  • If you sign up via Google: Your email address, name, and profile picture URL (managed via Google OAuth).
• Financial Information: Rent amounts, commission rates. IBAN numbers are collected but strictly **encrypted client-side** before storage.
• Property & Contract Data: Addresses, rental contract dates, tenant/owner associations.
• Usage Data: Basic logs of system interaction (e.g., login times). We do **not** use third-party analytics trackers like Google Analytics at this time.

3. How We Use Your Data & Legal Basis

We process your data for the following purposes and under the following legal bases (GDPR/KVKK):

4. Data Storage, Encryption & Transfers

We take security seriously. Here is how we protect your data:

• Advanced Encryption: Highly sensitive fields (Turkish ID, IBAN) are encrypted using AES-GCM (an industry-standard algorithm) directly in your browser before they are sent to our database. This adds an extra layer of privacy.
• Secure Database: Data is stored in Supabase (PostgreSQL), utilizing Row Level Security (RLS) policies to ensure users can only access their own data.
• HTTPS/TLS: All data in transit between your device and our servers is encrypted via SSL/TLS.

International Transfers

Our primary infrastructure provider, Supabase, utilizes servers which may be located within the EU or other regions. By using the Platform, you acknowledge that your data may be transferred to and processed in countries outside of your permanent residence. We rely on Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs) to ensure your data remains protected in accordance with GDPR and KVKK standards.

5. Third-Party Processors

To provide our Service, we share data with the following trusted third-party service providers (Processors). We do not sell your personal data.

6. Your Rights (GDPR & KVKK)

You have specific rights regarding your personal data. You may exercise these rights at any time:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your account and personal data, subject to legal retention obligations.
• Right to Restriction: Request that we restrict the processing of your data.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Complain: You have the right to file a complaint with your local data protection authority.

To exercise any of these rights, please contact us at the email address below. We may ask for proof of identity before fulfilling your request.

7. Data Retention

Your personal data is retained only as long as your account is active or as needed to provide you the Service. If you chose to delete your account, your data is permanently deleted from our active databases within 30 days. However, we may retain certain information (e.g., transaction records) as required by law (tax, accounting) or for legitimate business purposes (fraud prevention).

8. Cookies & Tracking

Our platform uses **essential cookies** required for authentication (keeping you logged in) and user preferences (language settings).

No Analytics Tracking: We do not currently use third-party analytics cookies (such as Google Analytics) or advertising trackers. For detailed information, please review our Cookie Policy.

9. Policy Changes

We may update this Privacy Policy from time to time. For significant changes, we will notify you via email or in-platform notification. Changes are effective from the date of publication.

10. Contact Us

If you have questions about our privacy policy or wish to exercise your data rights, please contact us: