GDPR & Data Protection Clarification Text

1. Introduction

As Wecordy, we attach importance to the privacy of our users' personal data. This clarification text has been prepared within the scope of the General Data Protection Regulation (GDPR) and relevant data protection laws, to explain for what purposes your personal data is collected, how it is processed, with whom it is shared, and what rights you have.

2. Data Controller

Data Controller: Wecordy (application developer team or authorized company).

3. Collected Personal Data

Wecordy collects a minimum level of personal data to provide the service. Examples of collected data are:

• Registration and login details (username, email address, and password details - passwords are stored securely).
• Profile details (fields filled in by the user optionally).
• Chat contents and messages (processed and stored on servers for the purpose of providing the service; not end-to-end encrypted or additionally encrypted at rest, and protected by SSL/TLS only during transmission).
• Device information, IP address, connection logs (for security, error detection, and connection management purposes).

4. Purposes of Personal Data Processing

Collected personal data is only processed for the following purposes:

• Providing the Wecordy service and managing user accounts.
• Ensuring account security, preventing unauthorized access.
• Server and application management, error detection, and performance monitoring.
• Fulfilling legal obligations (court demands and official authorities).

5. Retention Periods of Data

Personal data is stored for the period necessary to carry out the service and fulfill the relevant purposes. In case of a request to delete the user account, the relevant personal data is permanently deleted or anonymized within 30 days at the latest (it can be stored as long as required if there is a legal obligation).

6. Sharing and Transfer of Data

Wecordy does not share personal data with third parties. However, data sharing can be made in the following situations:

• Legal obligations (court order, request of law enforcement forces, etc.).
• Cloud and hosting providers used for the infrastructure of the service (e.g., server providers). This sharing is only for the purpose of data storage/operation, and these providers are obliged to protect the privacy of the data.

7. Security Measures

Wecordy implements appropriate technical and administrative measures to ensure the security of personal data. Example measures:

• All application traffic is encrypted with SSL/TLS.
• Passwords are stored with secure hash algorithms; passwords are never stored as plain text.
• Authorization and access controls are applied; regular maintenance is carried out for server security.

8. User Rights (GDPR Article 15-22)

Within the scope of GDPR and other data protection regulations, users have the following rights:

• To learn whether their personal data is processed.
• To request information if processed.
• To learn whether data is used in accordance with the purpose.
• To request the deletion or anonymization of data.
• To request the correction of incorrect data.

9. Amendments

This clarification text can be updated when necessary. The updated text becomes effective on the date of publication on the application or website. In case of significant changes, users will be informed via appropriate channels.