Privacy Policy

Last updated: 7 July 2026

This Privacy Policy explains how Command Technology Software Base LTD. ("Rentificial", "we", "us") collects, uses, shares and protects your personal data when you use the Rentificial rental-management platform, our websites and mobile applications (together, the "Services"). We act as the data controller for account and website data, and as a data processor for the data our customers store in the platform about their own end-customers. We comply with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the EU General Data Protection Regulation ("GDPR").

1. Who we are

Command Technology Software Base LTD. (in Türkiye: Türkiye İçin Komut Teknolojisi Yazılım Üssü Ticaret Ltd. Şti.), Zümrütevler Mah. Ural Sok. No 14/3 Maltepe, İstanbul, Türkiye. Contact: [email protected].

2. Data we collect

• Account data: name, surname, e-mail, phone, company name, tax details, password (hashed).
• Billing data: plan, invoices, and payment metadata. Full card numbers are never stored by us; they are processed by our payment providers.
• Usage data: log records, IP address, device and browser information, feature usage and diagnostics.
• Content data: the rental, reservation, contract, asset, customer and financial records you enter into the platform.
• Communications: support tickets, e-mails and messages you send us.

3. Why we process your data (purposes and legal bases)

• To provide, operate and secure the Services — performance of a contract.
• To process subscriptions and payments — performance of a contract and legal obligation.
• To provide support and communicate service notices — legitimate interest and contract.
• To improve and develop the Services — legitimate interest.
• To send marketing messages where you have opted in — consent.
• To comply with legal, tax and accounting obligations — legal obligation.

4. Sharing and sub-processors

We share data only as needed to run the Services, with vetted sub-processors under data-processing agreements: cloud hosting and storage (Amazon Web Services), payment processing (Stripe, iyzico), transactional e-mail and push notifications, and analytics. We may disclose data to competent authorities where required by law. We do not sell your personal data.

5. International transfers

Some sub-processors may process data outside your country. Where this happens we rely on adequacy decisions or standard contractual clauses and take appropriate safeguards as required by KVKK and GDPR.

6. Retention

We keep account and content data for as long as your account is active and thereafter for the periods required by law (for example, tax and commercial-record retention). Backups are rotated and deleted on a defined schedule. When you close your account we delete or anonymise your data within a reasonable period, except where retention is legally required.

7. Your rights

Subject to applicable law you may request access, rectification, erasure, restriction or portability of your data, and object to certain processing. You may also withdraw consent at any time. To exercise your rights contact [email protected]; we respond within the legally required timeframes.

8. Security

We use encryption in transit, access controls, hashed passwords, isolated environments and regular backups to protect your data. No method of transmission or storage is completely secure, but we work continuously to protect your information.

9. Cookies

Our websites use cookies and similar technologies as described in our Cookie Policy.

10. Changes

We may update this Policy. Material changes will be announced in the platform or by e-mail. The "last updated" date shows the current version.

11. Contact

For any privacy question, contact [email protected] or write to the address above.