FaprikAI Privacy Policy

FaprikAI is a service for advertising management, setting up Google measurement and search tools, Instagram and Facebook messaging, and text and images, offered to businesses that use the Faprika e-commerce platform. The service is provided by İnovabil Teknoloji Sanayi ve Ticaret A.Ş. ("Faprika", "we"): İOSB Mah. YTÜ Teknopark Sokak No: 1 İç No: Z16 Başakşehir, İstanbul · info@faprika.com · +90 850 333 15 23.

This policy is the privacy notice under the Personal Data Protection Law No. 6698 (the "Law"). Faprika is the data controller for personal data about your store account and the people who use the service (the store owner, its staff and the person who connects a Meta or Google account). Your store is the data controller for data about its customers (messages sent to your page, customer lists); Faprika processes this data only on your store's behalf and instructions, as a data processor.

English version: FaprikAI Privacy Policy.

Which information we use

With the Meta (Facebook, Instagram) connection: the Meta user ID and name of the person who makes the connection; the ad accounts, Facebook pages, Instagram accounts, product catalogs and Meta pixel you select; campaign, ad set and ad information; spend and result reports (impressions, clicks, sales counted by Meta); audience sizes of site audiences. If you use the messaging service, the messages that arrive at your page and Instagram account, the sender's identity on Meta and your replies.
With the Google connection: campaign, budget, conversion and report information of your Google Ads account; if connected, the ID of your Merchant Center account.
When setting up Google Analytics, Search Console and Merchant Center: for your store we create, in Google accounts managed by Faprika, a Google Analytics property and data stream, a Search Console site and a Merchant Center account for your products; we link the Analytics property to your Google Ads account, add the measurement and site verification tags to your site, and submit your sitemap and product feed to Google. From these we read only aggregate figures: visitor, session, purchase and revenue totals and the channel breakdown for 28-day periods; clicks, impressions, average position and the most-clicked searches in Google Search; and the approval status of your products in Google. We do not read information that identifies your visitors individually.
Through Google, when you turn on a Google service in your Faprika management panel: the email address of the Google account used (we keep the address and a one-way digest of the account's identifier, so that all of your store's Google services use one account); from your own Merchant Center account, the accounts the Google account can use and the approval status and issues of up to 250 products; from your own Google Analytics property, the list of properties and the last 28 days' sessions, active users, purchases and revenue; from your own Search Console, the list of sites and the last 28 days' clicks, impressions, click rate and average position. We keep only these totals and the five most frequent product issues, replaced at each reading, and we write nothing to these services.
From your store: product names, descriptions, categories, images, price and stock information (for ads and catalogs), order totals (to report actual sales). Product cost and profit margin are not sent to artificial intelligence.
Your store's customers: only if you allow it and only for your customers who have given consent to communications, email and phone information is irreversibly encrypted (SHA-256) before leaving your store and is used to create a customer audience on Meta. The behavior of visitors to your site is processed by Meta and Google through the Meta pixel and the Google tag, under their own terms; we only see aggregate counts of this data.

For what purpose

To set up and manage campaigns in your ad account with plans you have approved; to keep spend within the monthly cap you have approved; to keep your product catalog and audiences up to date; to measure your site's visits and sales in Google and submit your site to Google Search; to provide you with reports and show your site's Google summary in your management panel; to show your messages in your management panel and send your replies; to answer your support requests. We do not sell your information and do not use it for purposes other than these.

Legal Basis and Collection Method

We collect personal data electronically and by automated means: through these companies' interfaces (APIs) with the permission you give when you connect your Meta and Google accounts, from the FaprikAI add-on in your store, from your admin panel and from support correspondence.

We process this data on the following legal bases under Article 5 of the Law: it is necessary for entering into and performing the service contract (Art. 5/2-c); to fulfil our legal obligations, such as keeping invoices and records (Art. 5/2-ç); for the establishment, exercise or protection of a right (Art. 5/2-e); and for our legitimate interests, such as keeping the service secure and improving it, provided that this does not harm your fundamental rights and freedoms (Art. 5/2-f).

For data about your store's customers, your store determines the legal basis. Your store is responsible for informing its customers and for obtaining any consent required to use a customer list.

Artificial intelligence

We use artificial intelligence to write ad copy, product descriptions and reply drafts. Only the information the task requires goes to the artificial intelligence (e.g. product name, description, category, store name, the text of the question to be answered); customer name, contact information and product cost are not sent. Every text written by artificial intelligence goes through a rule check and your approval before publication.

Advertising decisions (such as increasing a budget or pausing an ad) are made automatically within the plan and monthly cap you approve; you can stop the ads at any time and object to these decisions.

If you request a name, description and category suggestion from a product photo in the mobile app, the photo is stripped of location, device and shooting information before leaving your store and is used only to prepare the suggestion. Only the product should appear in the photo; do not send photos that show people, faces, documents or addresses.

Who we share it with

Meta and Google: by the nature of the service, your ads, Meta catalog and audiences are created in your own accounts; your Google Analytics, Search Console and Merchant Center records are created in Google accounts managed by Faprika. These records and the figures read from them are not shared with any other store; each store sees only its own summary.
Suppliers from whom we receive artificial intelligence and infrastructure services, solely to provide the service.
Authorized authorities, where legally required.

Meta, Google and some of these suppliers have servers abroad (for example in the United States and European Union countries). Personal data is transferred abroad under the conditions of Article 9 of the Law: to countries for which the Personal Data Protection Board has issued an adequacy decision, or with one of the appropriate safeguards listed in the Law, such as the standard contract published by the Board.

Retention and security

Your Meta and Google access permissions are stored encrypted and used only to provide the service.
Our copy of message texts is kept for at most 30 days; in your management panel, they remain for the retention period of the Marketplace Questions screen.
A photo sent for a product suggestion is deleted once the suggestion is prepared, within 24 hours at the latest; the suggestion text is kept for 30 days.
Ad reports are kept for as long as the service continues.
Aggregate figures read from Google Analytics, Search Console and Merchant Center are kept only in the summary in your management panel and are replaced with new ones every day; data in these tools is stored by Google under Google's terms.
The connection between your store and us is encrypted and protected.

Disconnecting and deletion

You can remove the Meta connection at any time from Facebook > Settings > Business Integrations or with "Remove connection" on the FaprikAI screen. When the connection is removed, your access permission is deleted; data deletion requests coming through Meta are fulfilled in the same way.
Turning a Google service off in your Faprika management panel deletes the permission we keep once no service uses it. To withdraw it at Google as well, remove FaprikAI in your Google Account's third-party connections (https://myaccount.google.com/connections).
If you wish, we transfer the Google Analytics property and Search Console site we created for your store to your own Google account; in Merchant Center, your product feed is added to your own account and our account is closed. You can also ask for these records to be deleted.
When you stop using the service, your access permissions and our copies of messages are deleted. The messages in your management panel are your data; they remain according to the retention period of the Marketplace Questions screen.
The campaigns, audiences and catalogs in your ad account are yours; nothing is deleted and they stay in your own account.
For deletion and your other rights under Article 11 of the Law, you can write to info@faprika.com; your request is concluded within 30 days at the latest.

Your Rights and How to Apply

Under Article 11 of the Law, you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of the processing and whether the data is used in line with that purpose; to know the third parties in Türkiye or abroad to whom the data has been transferred; to request correction if the data is incomplete or inaccurate; to request deletion or destruction of the data under the conditions of Article 7 of the Law; to request that correction, deletion and destruction be notified to the third parties to whom the data has been transferred; to object to a result against you arising from the analysis of the data exclusively by automated systems; and to claim compensation if you suffer damage because of unlawful processing.

You can send your request in writing to our address (a signed letter, delivered by hand or through a notary), or to info@faprika.com, signed with a secure electronic or mobile signature or sent from the email address you previously gave us and that is registered in our systems. Your request should include your name and surname, Turkish ID number (for foreign nationals, nationality and passport or ID number), address for notifications, email address and phone number if any, and what you are requesting.

Depending on its nature, your request is concluded free of charge within 30 days at the latest; if it involves an additional cost, the fee in the tariff set by the Board may be charged. Your store's customers send requests about data we process on your store's behalf to your store; we help your store answer them.

Google user data

FaprikAI's use of information received from Google APIs, and its transfer to other apps, complies with the Google API Services User Data Policy, including its Limited Use requirements.

We use information received from Google only for the purposes described in this policy; we do not sell it or use it to train AI models.

Our team views information received from Google only with your permission (for example, to resolve your support request), for security purposes or where required by law.

When your store uses the managed advertising service, Faprika's advertising team sees your store's Google Ads and Meta results in its own tool to prepare the plans you approve. You give this permission by adding the service and withdraw it by removing the service.

Changes and contact

If we change this policy, we publish it on this page and notify you of significant changes through your management panel. For your questions: info@faprika.com. General privacy notice: Protection of Personal Data; cookies: Cookie Policy; terms of service: FaprikAI Terms of Use.