Privacy Policy

01Scope

This policy applies to the sayiyo.com website, the Sayiyo dashboard and the Sayiyo Mobile app. Detailed information on the processing of your personal data is provided in the Data Protection Notice.

02Device data

Sayiyo devices are designed with KVKK (Türkiye’s Personal Data Protection Law No. 6698) in mind, following the principle of data minimization. Sayiyo PEOPLE devices use an AI camera; images are processed only on the device, never recorded or stored, and never leave the device. Only anonymous, aggregate entry counts are produced; no person recognition is performed and visitors cannot be individually identified. Sayiyo PASS devices use radar technology to produce only movement, direction and count data; no images are collected.

03Website data

The information you submit through the forms on the website (demo, contact, newsletter and resource requests) is sent to a Cloudflare Worker application running at forms.sayiyo.com. This application forwards the form content to Sayiyo as a notification email via Twilio SendGrid and saves it to a Google Sheets spreadsheet. A Cloudflare Turnstile bot check is performed on form submission, which processes your IP address and browser/device signals.

The site is hosted on Firebase Hosting (Google); the hosting provider processes technical data such as IP address and browser information when serving pages. Analytics and marketing tags such as Google Analytics 4, Microsoft Clarity, Google Ads and the Meta Pixel run only if you consent in your cookie preferences; see the Cookie Policy for details.

Live chat (Crisp) is loaded only when you click the chat bubble; your messages and session information are processed on Crisp IM SAS infrastructure. See the Cookie Policy for details.

04Service providers

We work with the following providers for the services offered through the website:

• Cloudflare, Inc. — The server application that receives website forms (forms.sayiyo.com, a Cloudflare Worker) and the Cloudflare Turnstile bot check on form submission. Data processed: form content, IP address, browser/device signals.
• Twilio SendGrid (Twilio Inc.) — Delivering form content to Sayiyo as a notification email. Data processed: form content.
• Google — Storing form records in a Google Sheets spreadsheet (form content), hosting the website on Firebase Hosting (IP address, browser information, request logs) and, only with your cookie consent, Google Analytics 4, Google Ads and Google Tag Manager (visit and interaction data, online identifiers, browser/device information).
• Meta Platforms Ireland Ltd. — Ad measurement with the Meta Pixel, only if you consent to marketing cookies. Data processed: pages visited, the form submission event, online identifiers, IP address, browser/device information.
• Microsoft (Microsoft Corporation) — Heatmaps and session replay with Microsoft Clarity, only if you consent to analytics cookies; what you type into forms is not recorded. Data processed: page interactions (clicks, scrolling, mouse movement), online identifiers, IP address, browser/device information.
• Crisp IM SAS — Live chat; used only when you start the live chat by clicking the chat bubble. Data processed: message content, contact details you share, IP address, browser/device information, session identifiers.

Some of these providers may process data on servers outside Türkiye. Transfers abroad are carried out within the framework of Article 9 of the KVKK; for transfers through analytics and marketing cookies (Google, Meta, Microsoft), the explicit consent you give in your cookie preferences applies, and you can withdraw it at any time.

05Customer account data

Dashboard users’ name, email and authorization details are processed for account management. Count data belongs to the customer; Sayiyo uses this data only to provide and improve the service, in anonymous and aggregate form.

06Retention period

Account data is retained for the term of the contract and throughout the statutory retention periods; form requests for a maximum of 2 years; count data for the period specified in the customer contract. Other data is retained for as long as the purpose of processing requires and for the statutory retention periods.

07Security

Data is encrypted in transit with TLS; access is restricted through role-based authorization and audited regularly.

08Your rights

The full list of your rights under Article 11 of the KVKK and how to apply is set out in the Data Protection Notice.

09Contact

For your questions, you can write to info@sayiyo.com.