Privacy Policy
Last updated: 3 October 2026
This is a translation; in case of any discrepancy the Turkish version prevails.
Üretimo is a web application that businesses making to order use to track their production. We process the information you give us when you open your account, and the production data you enter in the application, solely to provide the service. Your data is visible only to your own company’s users; it is not sold and not used for advertising. Data is stored in the European Union (Frankfurt). Whenever you ask, we will delete your account and all of your data.
1. Data controller
This policy applies to the Üretimo service provided at uretimo.com, app.uretimo.com and demo.uretimo.com. The data controller is Üretimo. For any questions or requests: info@uretimo.com.
2. What data we process
| Data | Source | Purpose |
|---|---|---|
| Full name, email address, password (stored only in hashed form) | Sign-up form | Creating the account, signing in, password reset, account-related emails |
| Name, email address and profile photo link from your Google account | The “Continue with Google” option | Signing in and matching accounts. Only email and basic profile permissions are requested from Google; Google Drive, Calendar and Gmail content is not accessed. |
| Company name, industry template, production site, team members and their roles, invited email addresses | Setup and Settings | Setting up the workspace, authorisation, invitation emails |
| Orders, customers and their contact details, workshops, stages, notes, reminders, price and invoice information, uploaded files and photos | Content entered by users | The service itself: production tracking. This data belongs to your company; we only store and display it. |
| Customer tracking link visits: time opened, how long the page stayed open, broad device type (phone / tablet / computer) and browser language | Public tracking page | Showing you when, how many times and for how long the link was used. No IP address, cookie or any information identifying the person is recorded; records are no longer listed after 90 days. |
| Customer order form: the sender’s full name, email address and phone number; order details (style, product, colour, quantity, size breakdown, requested due date, fabric, PO / reference, delivery address and method, notes, selected language); attached files (tech pack, images) | Public order page (/s/…); the order link a supplier sends to its customer | Letting the supplier see the incoming order and approve it or reject it with a reason; once approved, it is transferred to the order record and its files. It is visible only to users of the company that created the link who have order permissions; the customer sees the status of what they have sent on the same page. Records and attachments are kept for as long as the company’s account is open and are deleted when the company is deleted. |
| Anonymous usage measurement (page views, country, device type) | Vercel Web Analytics | Understanding how much the service is used. Uses no cookies and does not identify individuals. |
| Server logs (IP address, time, page requested) | Hosting infrastructure | Security and debugging; kept for a short time. |
| Information you give in the request form (business, industry, contact person, contact details) | The /basvur page | Contacting you and carrying out the setup |
3. Legal basis
We process data under the Turkish Personal Data Protection Law No. 6698 (KVKK) on the basis of the establishment and performance of the service contract (Art. 5/2-c), our legal obligations (Art. 5/2-ç) and our legitimate interests (security, improving the service; Art. 5/2-f). For users located in the European Union, the same purposes fall under GDPR Art. 6(1)(b) and 6(1)(f).
4. Who can see your data
- The data you enter in the application is visible only to users of your own company. Database-level Row Level Security rules prevent access to other companies’ data.
- There are role-based restrictions: for example, an external workshop user sees only their own workshop’s orders and cannot see customer details or prices.
- A customer tracking link you create is open to anyone who has the link and shows only the stages you have marked “customer sees”, plus product and quantity information; prices, workshop names and internal notes are not shown. You can close the link at any time.
- A customer order link you create is also open to anyone who has the link: your customer uses this page to send you orders and sees only the status of what they have sent; none of your other customers, orders, prices or internal information is visible. A submitted order does not enter production until you approve it. You can close the link at any time.
- We do not sell or rent your data, use it for advertising or share it with third parties. The only exceptions are the service providers below and legal obligations.
5. Service providers (data processors)
| Provider | Role | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | EU, Frankfurt (eu-central-1) |
| Vercel | Web hosting, server functions, anonymous usage measurement | Global content network; functions in the EU region |
| Optional “Continue with Google” sign-in; sending account emails (Google Workspace); image generation when Fabric try-on is used (Gemini API, paid tier: fabric images and prompts sent are not used to train Google’s models) | Subject to Google’s own policy |
These providers process data only on our instructions and in order to provide the service.
6. Cookies and browser storage
Üretimo does not use advertising or tracking cookies. To keep you signed in, a session key is stored in your browser’s local storage (localStorage); it is deleted when you sign out. Small preferences, such as not showing the reminders box again on the same day, are also kept in local storage. All data in the demo environment (demo.uretimo.com) stays only in your browser and is not sent to the server.
7. Retention period
Your data is kept for as long as your account is open. When you ask us to delete your account or your company workspace, all orders, customers, files and user records are permanently deleted within 30 days; deletion from backups may take up to another 30 days. Server logs are kept for no more than 30 days.
8. Security
All connections are encrypted with TLS. Passwords are stored irreversibly hashed. Row-level access rules, role restrictions and change-protection triggers are applied in the database. Files are accessed only through short-lived signed links.
9. Your rights
Under Article 11 of the KVKK and under the GDPR, you have the right to access your data, to request its correction or deletion, to object to processing and to receive a portable copy of your data (Excel). You can change most information yourself in the Settings section of the application and download it as Excel from the Accounting and Orders screens. For other requests, simply write to info@uretimo.com; we will reply within 30 days at the latest.
10. Children
Üretimo is intended for businesses; it is not designed for use by anyone under 18, and we do not knowingly collect data from them.
11. Changes
When we update this policy, we change the date on this page; we also notify you of significant changes at your account email address.