Privacy policy.

Who is responsible

Digital Karınca operates Installens, a web workspace for Wi-Fi installation evidence. This notice covers the public website, accounts, workspace use and communications with us.

We act as the data controller for account administration, service security, our customer relationship and legal obligations. The organization running your workspace determines why customer, site and job evidence is collected and who may use it. For that content, we process information on the organization’s instructions to provide the service. Your organization’s own privacy notice also applies.

You can contact Digital Karınca at 6523 Sokak No: 32/CB AVM Giriş Park Yaşam Ticaret Merkezi, Karşıyaka/İzmir, Türkiye, or bilgi@digitalkarinca.com. If your request concerns evidence controlled by your employer or customer, we can help direct it to the responsible organization.

Information we process

Information reaches Installens through registration and sign-in, workspace invitations, forms, files you select or capture, review actions, support messages and enabled service integrations.

• Account and team information: name, email, protected password credentials, session details, workspace membership, roles and invitations.
• Installation records: customer and site details, addresses, job assignments, device identifiers such as serial numbers and MAC addresses, requirements and technician notes.
• Evidence and history: original photos and PDF documents, file names and integrity checks, extracted facts, pre-check results, corrections, reviewer identities, decisions and versioned reports. Images may contain people, location details or other personal information. Embedded photo metadata can include capture time and GPS coordinates.
• Service information: request and error records, network and browser details used for authentication and abuse prevention, support correspondence, notification destinations and delivery status.
• Billing information, when enabled: plan, customer and subscription identifiers, payment-related events and access status. Card entry takes place with the checkout provider; Installens does not provide a card-storage form.

Only upload information needed for the installation. Avoid identity documents, sensitive personal data, unrelated faces, passwords and network secrets. Obtain the permissions and notices required for people whose information appears in your evidence.

Why we use it

Under Türkiye’s Personal Data Protection Law No. 6698 (KVKK), the purpose and applicable legal ground depend on the activity. We do not treat reading this notice as consent to every form of processing.

Provide accounts and the agreed service

Account administration, workspace access and requested support rely on performance or establishment of a contract where you are a party (Article 5(2)(c)). For authorized staff using an organization’s service, administration may rely on legitimate interests subject to your fundamental rights (Article 5(2)(f)). The workspace organization determines the lawful ground for the evidence it instructs us to process.

Keep the service reliable and protect access

Troubleshooting, fraud prevention and proportionate security records serve legitimate interests, balanced against individual rights (Article 5(2)(f)).

Meet legal duties and handle claims

Required records and lawful requests rely on applicable legal obligations or express legal requirements (Articles 5(2)(a) and 5(2)(ç)); establishing, exercising or protecting rights may rely on Article 5(2)(e).

Respect optional choices

Where processing requires consent, it must be specific and separate. Browser notification permission is optional and can be changed in your browser; it is not blanket consent for unrelated uses of your information.

AI and service providers

When live AI checking is enabled, the selected photo or PDF is sent through OpenRouter to the configured model provider to extract visible facts. Installens compares extracted facts with the job requirements separately. Checks can be wrong or incomplete; an AI result does not approve a job or certify an installation. A human reviewer makes the decision.

Enabled integrations can include Cloudflare R2 or another compatible storage service for files, Resend for transactional email, OneSignal for web push, and Whop for checkout and subscription events. They receive the information needed for their function, such as file content, an email address and notification content, a push identifier, or billing details. Infrastructure and authorized support providers may also process operational data. Test environments can use local or simulated services instead.

Processing locations and downstream AI providers depend on the live deployment. Request the provider, location and applicable processing terms from us before sending data subject to location restrictions. International transfers require the conditions and safeguards applicable under KVKK Article 9; this notice does not establish a transfer safeguard or claim that all data stays in Türkiye. We do not make a blanket promise about a third-party model provider’s retention or training practices.

Sharing and access

Workspace membership, roles and job assignments determine who can access records. Authorized reviewers and administrators see the information needed for their work. We may also disclose relevant information where required by law or necessary to establish, exercise or protect legal rights.

Report sharing uses a named recipient account by default. A sender may instead choose a private link valid for seven days. Anyone holding that link can open the report until it expires or is revoked. Both sharing modes can be revoked, but revocation cannot recall files already downloaded or copied outside Installens.

Published reports preserve the evidence and decisions at the time of publication. Check the recipient, attachments and report version before sharing; your organization is responsible for choosing appropriate recipients.

Cookies and your device

Essential session cookies keep you signed in. Sessions have a seven-day lifetime and may be renewed while in use. A separate seven-day session marker helps the public page recognize a returning user. Browser storage also keeps workspace selection, sign-out state, offline job details and queued files. These functions support the service rather than advertising.

Saved job details expire after seven days. Signing out or switching workspace removes cached details and verified local files for the previous account context; originals still awaiting upload remain recoverable by their owner. Use Remove from this device in Settings to also remove that account’s pending files. Removing local data does not erase copies already uploaded to the server.

The offline application shell can remain cached. Browser or device cleanup can remove local records, including files that have not uploaded. Blocking essential cookies or storage may prevent sign-in or offline capture. Keep originals until upload verification is complete.

These public pages do not load advertising analytics scripts. If web push is configured, the workspace can load OneSignal to associate notifications with your account; delivery requires browser permission. You can revoke that permission in your browser settings.

Retention and deletion

Server records support the installation history, workspace agreement, legal obligations and handling of disputes. Retention depends on those purposes and requirements; this notice does not set an invented fixed lifetime for all evidence or backups.

The current service does not automatically purge server evidence on a schedule. Archiving a customer, cancelling a job, ending a subscription or removing data from a device does not delete uploaded originals, review history or issued reports. Contact us to establish retention and export requirements for your workspace, especially before uploading records with a mandatory deletion deadline.

You may request access, correction or erasure. Requests are assessed with the responsible organization and any applicable retention duty. When lawful grounds for processing cease, the applicable erasure, destruction or anonymization obligations apply. Immutable report history and recovery copies need to be included in that assessment; we do not promise an immediate self-service deletion that the application does not provide.

Your rights

Subject to the conditions in KVKK Article 11, you can ask whether your personal data is processed, obtain information about its use and purpose, and learn who receives it domestically or abroad. You can request correction of incomplete or inaccurate data, erasure or destruction where the legal conditions apply, and notification of those actions to recipients.

You can object to an adverse result based solely on automated analysis and seek compensation for damage caused by unlawful processing. Other applicable data-protection laws may provide additional rights. Workspace administration and an AI pre-check do not remove those rights.

For a formal KVKK request, write in Turkish to the address below or email us from an address already associated with your account. Include the information required by the KVKK application rules. You can first ask us how to submit identity information securely; do not attach passwords or unrelated evidence. We may verify identity and authority before disclosing or changing records.

KVKK applications are handled as soon as possible and within 30 days, subject to its rules on requests and any permitted costs. You may complain to the Turkish Personal Data Protection Authority in accordance with the applicable procedure if your request is rejected, inadequately answered or unanswered.

Questions, requests or concerns?

Contact Digital Karınca about your account, information or workspace. For a privacy request, use the subject “Installens privacy request” and identify the workspace concerned.

We update this notice when the service or information practices change and revise the date above. Material changes that require a further notice or consent will be addressed separately. This notice is specific to Installens; external websites have their own notices.

Legal reference: Personal Data Protection Law No. 6698.