Privacy policy
Last updated: 14 November 2026
This policy explains what data datakingo receives from the accounts you connect, what it is used for, where it is stored, who it is shared with and how it is deleted. datakingo is in early access; what is written here applies from the moment you start using the service.
1. Data controller
Flaibee Technologies Dış Ticaret A.Ş. ("Flaibee", "we"). datakingo is a brand of this company.
- Address: Gülbahçe Mah. İçmeler Cad. No: 14/1 İç Kapı No: B05 Urla / İzmir, Türkiye
- Email: gizlilik@datakingo.com
2. What data we receive, and with which permission
| Source | Permission you give | Data we receive |
|---|---|---|
| Google Ads | "See, edit, create, and delete your Google Ads accounts and data." (https://www.googleapis.com/auth/adwords) |
Account and campaign structure, budgets, spend, clicks, impressions, conversions, keywords and ad copy |
| Google Analytics | "See and download your Google Analytics data" (read only; https://www.googleapis.com/auth/analytics.readonly) |
List of properties; visit, traffic source, conversion and revenue reports |
| Search Console | "View Search Console data for your verified sites" (read only; https://www.googleapis.com/auth/webmasters.readonly) |
List of sites; search query, page, click, impression and position data |
| Directly from you | — | Name, email, company name; the cost items you enter; the limits you set; the approvals you give |
- The permission texts in quotation marks are written as they appear on Google's consent screen.
- The Meta (Facebook and Instagram ads) connection is not open yet. Before it opens, the permissions requested and the data received will be added to this table.
- When you give permission, Google issues us an access token. We connect to your account with that token. We never see or store your password.
- We receive Google data through Google's official programming interfaces (APIs), after you approve the consent screen. We collect the information you give us directly, and technical security records, electronically, by fully or partly automated means.
- datakingo reads aggregated report data from these accounts. It does not request data that identifies your individual visitors or customers (name, email, phone). Corporate campaign metrics that do not relate to an identified or identifiable natural person fall outside KVKK. If connected account reports incidentally contain third-party personal data, Flaibee acts solely as a data processor on your instructions.
- This site uses no cookies and no analytics tools. The hosting provider may keep technical records of visits (IP address, time) for security.
3. What we use it for
- To show your advertising, analytics and search data in one place and to calculate profit.
- To prepare recommendations on what should change.
- To apply the changes you approve in your ad account.
- To keep a record of who approved what, and when.
- To keep the service secure, find errors and prevent abuse.
- To meet legal obligations (for example, invoicing).
What we do not do:
- We do not sell your data or transfer it to advertising networks or data brokers.
- We do not use your data for our own advertising or for another customer's advertising.
- We do not show one customer's data to another customer.
- We do not use your data for credit evaluation.
- We do not use data received from Google to create, train or improve generalized or foundational AI or machine learning models, and we do not store it together with such models.
The legal basis is Article 5(2) of Turkish Personal Data Protection Law No. 6698 (KVKK):
- Establishment and performance of a contract (item c): reporting, profit calculation, recommendations and applying the changes you approve.
- Legal obligation (item ç): invoices and statutory records.
- Legitimate interest (item f): security, preventing errors and abuse, and the approval record.
- Establishment, exercise or protection of a legal right (item e): keeping approval and action records as evidence in case of a dispute.
4. Who we share it with
We share your data only to provide the service to you, with the following:
- Google Cloud (infrastructure). Data is stored and processed on Google Cloud servers.
- Your chat app. Only with your consent. You connect datakingo to a chat app (for example Claude or ChatGPT) yourself. When you ask a question there, the data needed for the answer is transferred to that app and processed under its provider's own terms. You choose which app to connect, and you can disconnect it at any time.
- AI model providers. In services where datakingo prepares analysis and recommendations on your behalf, data is transferred, with your consent and only to provide that feature, to these providers: Anthropic PBC, Google (Vertex AI and Gemini) and OpenAI. We use these providers' commercial (API) services under their standard data processing terms (DPA) as data processors, in which customer data is not used to train models.
- Google and Meta. A change you approve is sent to the relevant ad account to be applied.
- Accounting, e-invoicing providers and legal advisers. Only for invoicing, meeting statutory obligations and protecting legal rights.
- Authorities. Only when the law requires it.
In a merger or acquisition, we will not transfer your data without your explicit prior consent.
Do people read your data? Our staff do not read your data. There are three exceptions: your explicit consent (for example a support request, or a service plan in which our team works on your account), a security investigation (abuse or a bug), and a legal requirement.
5. Google "Limited Use" disclosure
datakingo's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Under these requirements, data received from Google is:
- used only to provide and improve the features you see in datakingo;
- transferred only to provide those features and with your consent, for security, or to comply with the law;
- never used for serving ads, retargeting or personalised advertising;
- not read by humans, except with your explicit consent, for a security investigation, or where the law requires it.
6. Where and how long we keep it
Data is stored in Google Cloud's europe-west4 region (the Netherlands), outside Türkiye, and is encrypted in transit and at rest. The cloud, AI model, connected chat app and advertising platform providers in section 4 may also process data outside Türkiye.
The legal ground for transfers abroad is Article 9 of KVKK:
- Ongoing transfers to infrastructure and AI model sub-processors: standard contractual safeguards under Article 9(4)(c).
- Occasional transfers not covered by a standard contract, and transfers triggered by your own commands to the chat app you connect: your explicit consent and necessity for performing our contract with you, under Article 9(6)(a) and (b). You are informed beforehand of the potential risks that arise because there is no adequacy decision.
| Data | How long it is kept |
|---|---|
| Access tokens | While the connection lasts. Invalidated immediately on disconnection and deleted within 24 hours |
| Advertising, analytics and sales data we read; information you enter | While the contract lasts. Deleted within 30 days after the contract ends or on your request |
| Backups | Deleted on a 30-day cycle |
| Approval and action records | 10 years after the contract ends (statutory limitation period) |
| Invoice and contract records | 10 years (Article 82 of Turkish Commercial Code No. 6102; 5 years under tax law) |
| Technical security and access logs (IP, timestamp) | Up to 2 years |
| Your email correspondence with us | 1 year after the last message (those that are part of a contract, an approval or a formal application are kept for the relevant statutory period) |
7. Withdrawing access and deleting your data
Withdrawing access. You can withdraw the permission at any time, without asking us:
- Google: remove datakingo on the Google Account → Third-party connections page.
- Meta: the steps will be published here when the connection opens.
Once you withdraw permission, datakingo can no longer access your account; the access token is deleted within 24 hours.
Deleting your data. To ask for your data to be deleted, send an email with the subject "Data deletion" to gizlilik@datakingo.com. Telling us which account's data to delete is enough. Writing from your registered email address speeds things up; if you cannot access that address, we verify that the account is yours and still take your request.
- We complete your request as soon as reasonably possible, within 30 days at the latest, and confirm it to you in writing.
- Deleted data leaves the backups within a further 30 days at the latest.
- Approval and action records, and invoice and contract records, are kept for the periods in section 6; all your other data is deleted.
8. Your rights under KVKK
Under Article 11 of KVKK, you can apply to us to:
- learn whether your personal data is processed and, if so, request information about it;
- learn the purpose of processing and whether the data is used for that purpose;
- know the third parties, in Türkiye or abroad, to whom the data is transferred;
- request correction if it is incomplete or inaccurate;
- request its deletion or destruction under the conditions in Article 7 of KVKK, and that this be notified to the third parties to whom it was transferred;
- object to a result against you that arises from analysis solely by automated systems;
- claim compensation if you suffer damage because the data was processed unlawfully.
You can submit a formal KVKK application by writing from your email address registered with us to gizlilik@datakingo.com, with a secure electronic or mobile signature, or in writing to the address in section 1. Under Articles 4(2) and 5 of the Communiqué on Applications to the Data Controller, formal KVKK applications must be submitted in Turkish and include your full name (and signature if in writing), Turkish ID number (or nationality and passport/ID number for foreign nationals), address for service, email and phone if available, and the subject of your request. You may always send data deletion and privacy requests in English under section 7.
We conclude your request as soon as possible, within 30 days at the latest, free of charge. If fulfilling it involves an additional cost, we may charge the fee in the tariff set by the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu); if the application arises from our fault, any fee collected is refunded.
If your application is rejected, if you find the reply insufficient, or if you receive no reply in time, you can file a complaint with the Board. The time limit is 30 days from the date you learn of the reply and, in any case, 60 days from the date of your application.
9. Contact
- Privacy and data requests: gizlilik@datakingo.com
- General questions: destek@datakingo.com
10. Updates
When we change this policy, we publish the new text on this page and change the "Last updated" date. If the way we use your data changes, we notify everyone with a connected account by email and ask for consent again where needed.