Privacy Policy

Effective date: 29.06.2026

QPI Lojistik ve Dış Ticaret A.Ş. ("Company", "we") operates the QPI Open Book Portal ("Portal") and acts as the data controller under Turkish KVKK (Law No. 6698) and applicable GDPR principles.

1. Controller

QPI Lojistik ve Dış Ticaret A.Ş. · İstanbul, Türkiye · Contact: kvkk@qpiopenbook.com

2. Data We Process

• Identity & contact: name, email, phone, company.
• Account & authorization: login email, hashed password, role, session logs.
• Operational data: projects, shipments, material lists, quote documents, uploaded files.
• Technical data: IP address, browser, usage and error logs.

3. Purposes

• Provision of the B2B portal service (contract performance).
• Customer authorization and data isolation (RLS).
• Document, quote, logistics tracking and reporting.
• Legal obligations (tax, commercial law).
• Information security, audit, abuse prevention.

4. International Transfers

We use Supabase, Cloudflare, and Google Gemini API; data may be processed outside Türkiye/EU under contractual safeguards.

5. Retention

For the lifetime of the account plus statutory retention (up to 10 years).

6. Your Rights

Access, rectification, erasure, restriction, portability, and objection. Contact kvkk@qpiopenbook.com.

7. Security

TLS in transit, encrypted at rest, row-level security, role-based access, tenant isolation.