Privacy Policy

QEMSY is a cloud-based corporate task, performance, and efficiency monitoring system operated by Western Software Professionals (a Turkish sole proprietorship).

QEMSY processes personal data in two distinct capacities under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") — this distinction governs how every article below should be read:

This Policy covers the qemsy.wsptekno.com marketing site, the QEMSY web/mobile application, and the Firebase-based server components behind them. It concerns:

• Organization administrator / account owner — the person who registers on behalf of a company and manages the subscription,
• Organization staff — employees added to the system by the organization administrator and included in task/performance tracking,
• Visitor — anyone browsing the marketing site before registering.

A national ID number is not a "special category" of personal data under KVKK; however, given its sensitivity, only the organization decides whether to enter such a number in the registry field and whether to inform its staff about it.

• Account creation, authentication, and session management,
• Providing task assignment, tracking, performance measurement, and reporting,
• Subscription management, billing, and payment processing,
• Customer support and resolving technical issues,
• Ensuring service security and preventing misuse,
• Complying with legal obligations (tax, accounting, official authority requests),
• Serving advertisements on the free tier (see Article 13),
• Measuring and improving service quality.

Personal data is collected electronically through registration forms, in-app usage, and automatic system logs. Legal bases under KVKK art. 5:

• Performance of a contract: account creation, service delivery, billing,
• Legal obligation: record-keeping required by tax and commercial legislation,
• Legitimate interest: service security, fraud/misuse prevention, service improvement,
• Explicit consent: obtained separately in exceptional cases where none of the above applies (e.g. future location data, or marketing communications).

To provide the service, your data is shared with the following providers, strictly for the stated purpose:

Your credit/debit card details never reach QEMSY servers and are never stored by QEMSY; the transaction takes place directly within PayTR's PCI-DSS compliant infrastructure.

As set out in Article 6, your data is hosted mainly within the European Union (Google Cloud europe-west1, Belgium); advertising service providers (AdSense/Adsterra) may process data internationally. These transfers are based, under KVKK art. 9, on transfers to countries with adequate protection or on the standard contractual clauses / appropriate safeguards offered by the relevant service provider.

The QEMSY marketing site and ad placements use cookies. Cookie types, retention periods, and how to manage your preferences are described in detail in a separate Cookie Policy.

As an exception to these periods, invoicing and accounting records that must be retained under the Turkish Commercial Code and Tax Procedure Law are kept separately for the period required by that legislation (generally 10 years).

• Passwords are stored using one-way hashing; no staff member can access plaintext passwords,
• Each organization's data is isolated from other organizations via database rules (Firestore Security Rules),
• Authentication and password resets are handled entirely server-side (Cloud Functions),
• Payment card data never enters QEMSY's infrastructure at any stage.

Every organization that enters staff data into QEMSY holds the role of data controller under KVKK with respect to that data. Accordingly, the organization is responsible for:

• Informing its own staff as required by KVKK art. 10 and obtaining explicit consent where necessary,
• Entering into the system only as much data as the service requires,
• Responding to KVKK requests its staff direct to it, or forwarding them to QEMSY,
• Deciding, at its own responsibility, whether to enter a sensitive field such as a national ID number into the registry field.

QEMSY does not use this data for its own purposes, sell it, or rent it to third parties beyond the organization's instructions; it shares it only with the subprocessors listed in Article 6, and only to the extent necessary to perform the service.

Under KVKK art. 11, every individual has the right to: learn whether their personal data is being processed; request information about it if so; learn the purpose of processing and whether it is used accordingly; know the third parties to whom it is transferred domestically or abroad; request correction if incomplete or inaccurate; request erasure or destruction; request that these operations be notified to the third parties to whom the data was transferred; object to a result that is to their detriment arising from analysis carried out exclusively through automated systems; and claim compensation for damages arising from unlawful processing.

As an organization administrator, you may submit requests concerning your own account/billing data in writing directly to contact@wsptekno.com.

Advertisements are shown only to users on the free tier, in a fixed banner area within the application. Ads are requested first from Google AdSense, and from Adsterra if there is no fill. See the Cookie Policy for the cookies these networks use.

QEMSY is a business-to-business (B2B) service designed for organizations to manage their work processes and is not directed at individuals under the age of 18. Organizations are expected to ensure that any staff they add to the system are of legal age.

This Policy may be updated as new features are added to the service (for example, location-based features or analytics/crash-reporting tools). Organization administrators will be notified by e-mail of material changes. The current version is always published on this page.

For questions about this Policy: contact@wsptekno.com