Privacy Policy

Account details: your name, email address, role, and the company you belong to.

Work records: the checklist answers you submit, the hour-meter or odometer readings you enter, and the photos or videos you attach as evidence.

Damage reports you file, including their photos and descriptions.

Machine location: a last-known GPS point per machine, when your employer has enabled it. It is attached to the machine, not followed continuously, and the approval screen works without it.

Device details needed to deliver notifications: a push token, the platform, the app version, and a device name you can see and revoke.

An audit record of sign-ins, approval decisions and role changes. It is append-only and cannot be edited, including by your employer.

To run the service your employer bought: showing assignments, recording checks, routing approvals, and scheduling maintenance from accumulated readings.

To meet safety and record-keeping obligations. A completed pre-work check is the evidence that it happened.

We do not use your data to advertise and we do not sell it.

Name, email and phone: for the duration of employment plus ten years, as Turkish labour law requires. The clock starts when your employer removes your account.

Push tokens: revoked the moment you sign out, and deleted after sixty days of inactivity.

In-app notifications: ninety days.

Damage reports and their photos: while the machine is owned, plus five years.

Invoices: ten years from issue, as tax law requires. These are never deleted automatically.

Submitted checklists are frozen at submission and are not deleted on a timer — they are the record of what was checked.

People in your own company, according to their role. Data is separated per company and no customer can see another's.

Service providers we use to run the product: hosting, file storage, email and SMS delivery, push notification delivery, and payment processing. They act on our instructions.

Smartop staff, when needed to support or repair the service, and when an approval has gone unanswered long enough to be escalated to us by your employer's own configuration.

You can ask what we hold about you, ask for it to be corrected, and ask for it to be deleted.

Deletion is not always immediate. Where a record must be kept by law — employment records, tax records — it is deleted when that period ends, not before. Where no such obligation applies, deletion happens within thirty days.

Audit entries keep an internal identifier so the record stays verifiable, but your name and email are replaced.

Because your employer decides what is recorded, start with them. Write to us at the address below and we will help.

privacy@smartop.com.tr