1. Data controller
Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller is İhsan Yazılım Bilgisayar Ltd. Şti. ("İhsan", "we").
- Address: GTÜ Teknopark, Cumhuriyet Mahallesi, Şişecam Yolu Sk., ARGE 12 Blok, Dış Kapı No: 54, İç Kapı No: 3 Gebze / Kocaeli, Türkiye
- Tax office / number: Ulucınar V.D. — 4701303784
- Email: [email protected]
- Phone: +90 850 303 14 73
2. Scope
This policy applies to the İhsan Sigorta Hızlı Teklif desktop application, our Otonom Agent, Muhasebe and Sesli Asistan products, and the ihsan.com.tr website. Insurance agencies that enter their own customers' data into our products are also data controllers for that data; İhsan processes it on the agency's instructions and only to provide the service.
3. Google user data
In the desktop application, an agency user can connect a Google account with the "Sign in with Google" button so that quotes and price reports are sent to their customers from the user's own Gmail account. This section explains how data obtained from Google during that connection is used.
Data we access
| Scope | Information accessed | Purpose |
|---|---|---|
| openid, email | Email address of the Google account | Show in the app which account is connected and which address the email will be sent from |
| profile | Name and profile picture | Show the connected account with its picture in the app |
| gmail.send | Permission to send email on the user's behalf | Send the email that the user prepared in the app and started with the "Send" button |
How we use it
- We use the Gmail permission only to send emails (quotes, price reports, policy documents) that the user prepared and sent by pressing the send button.
- We do not read, scan or store your inbox, messages, contacts or any other Gmail content. The application does not even request a permission that would allow it.
- Data obtained from Google is not used for advertising, profiling, credit assessment or training AI models, and it is never sold or shared with third parties.
- No employee of ours can see this data, except for security investigations, legal obligations, or support explicitly requested by the user.
Storage
- The session key (refresh token) issued by Google is stored only on the user's own computer, encrypted; it is never sent to İhsan servers.
- The email is delivered directly from the user's computer to Google (Gmail API) and appears in the user's Gmail "Sent" folder.
- When the user signs out in the app, the session key is revoked at Google and deleted from the computer.
Removing access
You can remove the connection at any time with the sign-out button in the app or from your Google account's third-party access settings.
Limited Use
İhsan's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. Personal data we process
- Agency and user information: name, title, phone, email, username, license and billing information.
- Information entered for quotes: details of the insured person entered by the agency to obtain insurance quotes (such as ID number, licence plate, vehicle and address details).
- Communication records: support requests, phone and WhatsApp conversations, Sesli Asistan calls.
- Technical data: application version, error logs, device and connection information.
5. Purposes and legal bases
We process personal data to install and operate our products, obtain quotes from insurance companies and issue policies, manage licensing and billing, provide technical support, ensure security and fix errors, and meet legal obligations.
This processing relies on the legal bases in Article 5 of KVKK: the establishment and performance of a contract, legal obligation, the establishment and protection of a right, legitimate interest and, where required, explicit consent.
7. Retention and security
We keep personal data for as long as the law requires or the purpose of processing needs, then delete, destroy or anonymise it. We protect data against unauthorised access with technical and organisational measures such as encryption, access control and logging.
8. Your rights
Under Article 11 of KVKK you have the right to learn whether your data is processed, request information about it, learn the purpose of processing and whether it is used accordingly, know the third parties it is transferred to, request correction, deletion or destruction, request that these actions be notified to recipients, object to a result against you arising from automated analysis, and claim compensation for damage caused by unlawful processing.
Send your requests to [email protected] or to the postal address in section 1. Requests are answered free of charge within 30 days at the latest.
9. Changes and contact
We may update this policy when needed; the current version is always published on this page and the date at the top changes. For questions, email [email protected] or call +90 850 303 14 73.