Protection of Personal Data (KVKK/GDPR) Information and Explicit Consent Text

As COMPANY X ("Company" or "USTAG"), we show maximum sensitivity to the processing and protection of your personal data in accordance with the Law No. 6698 on the Protection of Personal Data ("Law").

1. Processed Data Categories and Retention Periods

Data Category	Processed Data	Purpose of Processing	Retention Period / Legal Reason
Identity Information	Name-Surname, ID No, Date of Birth	Membership registration, billing, age verification.	10 years post-membership (TCO Art. 146)
Contact Information	Phone number, E-mail address	Communication, OTP codes.	As long as the account is active + 10 years
Professional Documents	Mastership Certificate, etc.	Verification of Service Providers' competence.	As long as the account is active + 5 years
Financial Information	Payment date, Subscription IDs	Tracking financial processes.	10 years (TCC Art. 82, VPL Art. 253)
Transaction Security	IP address, log records, push tokens	Platform security.	2 years (in accordance with Law No. 5651)

2. Explicit Consent to Overseas Data Transfer

We work with international suppliers with high data security standards in the processes of operating the application infrastructure, messaging, push notification management, and subscription tracking. Accordingly, my profile/portfolio photos, professional documents, device token information, and subscription status data;

• Amazon Web Services (AWS) (EU / USA): Server and data storage service,
• Apple APNs & Google FCM (USA): Push notification service,
• RevenueCat (USA): Subscription status control and store verification service,
• Resend (USA): Transactional (OTP, password reset, etc.) email delivery,
• Google Play Security Verification (Play Integrity) and Internal Security Firewalls: Device recognition (fingerprint) and transaction limiting (rate limit / OTP cooldown) processes are operated to prevent fake account creation, automated software (bots), and excessive transactions from the same device.

For these purposes, I consent to their transfer to servers abroad in accordance with KVKK Article 9.

3. Profiling and Automated Decision-Making Processes

I consent to the processing of my location data and past in-app preferences in profiling processes to list the closest/most suitable masters and services to me through algorithms.

4. Data Subject Application Procedure

To exercise your rights under KVKK Article 11, you can send an email to destek@ustag.pro to forward your request to us.