Privacy and personal data

01. Controller

360 GLOBAL STUDIO YAZILIM VE TEKNOLOJİ ANONİM ŞİRKETİ, trading as Global 360 Studio. Address: Adalet Mahallesi, Manas Bulvarı, Folkart Towers, No: 39, Suite 2511, Bayraklı / İzmir, Türkiye. Contact and personal data requests: contact@global360.studio. Company details are taken from the existing Global 360 Studio support page.

02. Data and purposes

Your name, account/session identifiers, convoy and vehicle membership and role operate your account and shared trip. Text, photos, voice notes, memories and audio files you submit are stored and shared in the chosen conversation or trip. Routes, stops, parking/meeting points, tasks, expense amounts/participants, votes and music queues support crew coordination. Expense tracking does not request banking or payment credentials.

03. Phone, connection and support data

When phone sign-in is enabled, the number is sent to the verification provider and processed temporarily during verification; the persistent account mapping uses a keyed hash (HMAC). The current development environment has no active real SMS provider. Request IP addresses and connection information may be processed for security and rate limiting; production logging scope and retention must be set with the final deployment. If you email support, your address, message and attachments you choose to send are processed to handle your request. Correspondence retention and the email provider must be disclosed with the production operation.

04. Location and permissions

Precise location is shared with convoy members when the selected vehicle device starts sharing during an active trip. Device permission alone does not start sharing. The latest location, update time and navigation progress are processed; a continuous GPS trail is not created. Stopping sharing or ending the trip clears the live vehicle position, but does not automatically delete saved destinations, stops or parking points. You can join as a passenger without location permission. The microphone is used for radio and voice notes; photo selection accesses the images you choose.

05. Radio and private chat

Live radio is relayed through the server to the selected convoy or vehicle and is not recorded. Voice notes sent to chat are stored messages. Vehicle chat is filtered by server-side vehicle membership. This is not an end-to-end encrypted messaging service; the authorised server processes data. Production connections require HTTPS/WSS. We cannot control screenshots or copies recipients save outside the service.

06. Recipients and providers

Convoy members receive shared trip information; vehicle members receive vehicle-private messages. iOS map and route requests use Apple MapKit. Android uses OpenFreeMap map resources and a configured routing service; providers may receive IP addresses and requested map/coordinate information. Opening a Spotify invitation takes you to Spotify; Convoy360 does not receive your Spotify password or audio stream. Apple Music, when enabled, uses your Apple account and permissions. SMS, APNs and automatic place services depend on release configuration; active providers and countries must be disclosed in the final policy.

07. Collection and legal grounds

Data is collected electronically through your entries, uploads and permitted device sensors. Necessary account, membership and requested communication functions rely on performance or establishment of a contract (Turkish KVKK Article 5/2-c). Security and abuse prevention rely on legitimate interests balanced against your rights (5/2-f). Mandatory legal requests rely on applicable obligations or the establishment, exercise or defence of rights (5/2-ç and e). Optional processing based on consent requires a separate informed choice; operating-system permission alone is not KVKK consent. These grounds must be verified against final data flows and any other applicable local law.

08. Retention

In the development build, account and shared content may remain until deleted by the user or until the relevant trip has no members and is removed. There is no general age-based purge for all content yet. Local chat drafts expire after at most seven days and are cleared when the account/server changes. Live radio audio is not retained. Session access expires after 30 days; expiration is not the same as deleting all records. Production backup deletion and technical-log periods are not final, so no fixed period is promised here.

09. Your rights

Under KVKK Article 11, you can ask whether data is processed, obtain information about processing, purposes and recipients, request correction and qualifying erasure/destruction and notification to recipients, object to adverse outcomes based only on automated analysis, and seek compensation for unlawful processing. Contact us to make a request; statutory procedures and response periods apply. Other mandatory rights under applicable law remain unaffected. We may reasonably verify account ownership and will not ask for passwords or one-time codes.

10. Deletion and copies

Follow the account deletion steps. Deletion removes membership, your messages/uploads, account/session records and related tasks/expenses. Other members’ own content remains. Uninstalling or logging out does not delete your server account. Prior backups and copies recipients have saved are separate; the production backup deletion process must be set before public release.

11. Advertising, children and transfers

The current application code has no advertising or third-party behavioural analytics SDK. The website’s own infrastructure logs and existing cookie practices require separate consideration. Convoy360 is not designed as a children’s service; age/parental flows must be finalised before public release. The production hosting country and international transfer mechanism are not yet selected. A generic consent statement does not establish a compliant transfer arrangement; applicable safeguards must be established and disclosed.

12. Company details

• Legal name: 360 Global Studio Yazılım ve Teknoloji Anonim Şirketi (Global 360 Studio)
• Registered office: Folkart Towers D:2511, No: 39, Adalet Mahallesi, Manas Bulvarı, Bayraklı, 35530 İzmir, Türkiye
• MERSIS no.: 0001280617500001
• Trade registry: 274399 — İzmir Trade Registry Office
• Chamber of commerce: 2324400 — İzmir Chamber of Commerce
• Tax office / number: Karşıyaka / 0012806175
• Telephone: +90 545 827 2360
• E-mail: contact@global360.studio
• Website: https://global360.studio