This policy explains how personal data is processed when you use the extensions and websites of Eklentio (support@eklentio.com.tr), the data controller. It also serves as the information notice under Turkish Personal Data Protection Law No. 6698 (KVKK).
In short: what you work on inside an extension (for Watzle: contact lists, messages, chats and reports) stays in your browser and is never sent to us. Our server keeps only your account, your plan and daily usage counts.
1. Data that stays on your computer
For Watzle: contact lists and phone numbers you upload, messages, attachments, templates, auto-reply rules, send reports, delivery and reply status, and chat backups. Watzle does not read or store your WhatsApp password or session keys. This data lives in the browser storage given to the extension and is deleted when you remove the extension.
2. Data we process on our server
| Data | Why | Legal basis |
|---|---|---|
| Email address, name and profile picture link from your Google account | To create your account, sign you in and contact you | Performance of contract |
| Plan, subscription status, Paddle customer and subscription IDs | To unlock paid features and manage the subscription | Performance of contract |
| Daily usage counts (not content) and your time zone | To apply plan limits and reset the day in your time zone | Performance of contract |
| A random ID for each signed-in device, browser name, last seen time | To manage sessions and sign devices out | Legitimate interest (security) |
| Messages you send with “Contact us”, an optional screenshot and technical details | To answer you and fix problems | Performance of contract; consent (screenshot) |
| Misuse reports sent to our abuse address and the actions we take | To enforce our terms and prevent spam | Legitimate interest |
Card and billing details are processed directly by Paddle as Merchant of Record under its own privacy policy and never reach us.
3. Service providers
- Google — sign-in.
- Cloudflare — hosting of our server and database.
- Paddle — payments, invoices, tax and subscription management.
Some providers may process data outside Türkiye (for example in the EU or US), relying on the safeguards required by KVKK and the GDPR. We do not sell your data or use it for advertising.
4. Retention
- Account data: while your account is open; deleted within 30 days of a deletion request.
- Daily usage counts: at most 13 months.
- Support conversations: at most 2 years after they are closed.
- Invoices and payment records: kept by Paddle as required by law.
5. Your rights
Under Article 11 of KVKK and, where it applies, the GDPR, you may ask whether your data is processed, request access, correction or deletion, object, receive a copy, and complain to a supervisory authority. Write to support@eklentio.com.tr from your account’s email; we answer within 30 days.
6. Cookies
This website uses no cookies or tracking tools. Extensions keep settings and your session in your browser’s local storage.
7. Security and children
All communication with our server is encrypted (HTTPS) and sessions are protected with signed keys. The Services are not intended for anyone under 18.
8. Changes
When we update this policy the date above changes; important changes are announced in the extensions.