Onelift - Privacy Policy & Disclosure Text

Disclosure Text on the Processing of Personal Data

As Onelift ("The Company"), we respect the privacy of our users and prioritize the security of their personal data. In accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”), we process your personal data as a "Data Controller" within the framework explained below.

Data Controller: OneLift
Address: onelift comp.
E-mail: oneliftr@gmail.com

1. Processed Personal Data

Within the scope of your use of our platform, the following data may be processed:

Identity and Contact Information: Full name, e-mail address.
Customer Transaction Information: Selected subscription plan, billing information, payment history.
Transaction Security Information: IP address, log records, browser info, login-logout timestamps.
Technical Data: Connected Cloud Provider API keys (encrypted), server configuration preferences.

2. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

Provision of our services and management of server provisioning processes,
Ensuring integrations with cloud providers (Hetzner, Vultr, etc.),
Fulfillment of our contractual obligations and billing processes,
Detection of security breaches and troubleshooting technical issues,
Fulfillment of legal obligations (Law No. 5651, etc.).

3. Transfer of Personal Data and International Transfer

As Onelift is a "Bring Your Own Cloud" platform, due to technical necessity, your data may be transferred to:

The cloud service providers (Hetzner, Vultr, etc.) you choose to complete installation processes,
Authorized payment institutions for the execution of payment transactions,
Authorized public institutions and organizations in case of a legal requirement.

Important Note: Since the infrastructure providers from which you receive server services may be headquartered abroad, your personal data may be transferred abroad based on your explicit consent or within the scope of legal exceptions pursuant to Article 9 of the KVKK.

4. Method and Legal Basis of Data Collection

Your personal data is collected through fully automated methods (web interface and API logs) when you register on the platform, define API keys, and use the services. Your data is processed based on the legal grounds of "establishment and performance of the contract," "legal obligation of the data controller," and "legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject" as specified in KVKK Article 5/2.

5. Your Rights as a Data Subject (Article 11)

Within the scope of KVKK, you have the following rights:

To learn whether your personal data is processed,
To request information if it has been processed,
To request correction if it is incomplete or incorrectly processed,
To request deletion or destruction of data when conditions are met,
To object to a result against you arising from the analysis of the processed data exclusively through automated systems.

To exercise your rights, you can apply in writing to our contact address above or via your registered e-mail address.

Last Updated: January 25, 2026