Privacy Policy

This Privacy Policy explains how AsistanX ("AsistanX", "we", "us") collects, uses, stores, and shares information in connection with the AsistanX platform — a multi-tenant SaaS e-commerce and ERP service operated at asistanx.com. It also describes how data is shared with Meta Platforms (Facebook and Instagram) when a merchant enables our advertising and marketing integrations.

1. Who We Are

AsistanX provides e-commerce storefronts, order and inventory management, and marketing tools to business customers ("merchants" or "tenants"). Each merchant operates its own online store and is the data controller for its own customers' personal data. AsistanX acts as a data processor on behalf of merchants and as a data controller for its own account and platform data.

2. Information We Collect

• Account data — name, email address, phone number, and company details of merchants who register for the platform.
• Store & order data — products, orders, invoices, and the contact/shipping details of a merchant's own customers, submitted through the merchant's store.
• Usage & device data — log data, IP address, browser type, and pages viewed, collected to operate and secure the service.
• Cookies & similar technologies — used for authentication, preferences, analytics, and, where consent is given, advertising measurement.

3. How We Use Information

• To provide, maintain, and secure the platform and its features.
• To process orders, payments, invoicing, and shipping on behalf of merchants.
• To send transactional and, with consent, product communications.
• To enable optional marketing integrations that a merchant chooses to activate, including Meta advertising tools.
• To comply with legal obligations and prevent fraud or abuse.

4. Legal Bases

Where required by law (including the Turkish KVKK and, where applicable, the GDPR), we process personal data on the bases of contract performance, legitimate interest, legal obligation, and consent. Advertising-related processing that involves marketing cookies or sharing data with Meta is carried out only where the applicable consent or opt-out preference permits it.

5. Sharing Data with Meta (Facebook & Instagram)

When a merchant connects its store to Meta through the AsistanX Meta integration, certain data is shared with Meta Platforms Ireland Ltd. to enable advertising and measurement. This sharing happens only for merchants who actively enable the integration, and only within the scope the merchant configures:

• Meta Pixel & Conversions API (CAPI) — website events such as page views, add-to-cart, and purchases are sent to Meta to measure and optimize ad performance. Events are transmitted only when the visitor's marketing cookie preference allows it.
• Custom Audiences — a merchant may build advertising audiences from its own customer list. Contact identifiers (email address and phone number) are hashed with SHA-256 on our servers before transmission; Meta receives only the irreversible hashes, never raw contact details.
• Product Catalog — public product information (title, description, price, availability, image, and store link) for products visible in the merchant's store is synchronized to Meta to power catalog and dynamic ads.
• Lookalike Audiences — created by Meta from a source Custom Audience to reach similar users; no additional personal data leaves our systems for this step.

Data shared with Meta is governed by Meta's Privacy Policy and the Meta business tool terms. Merchants are responsible for obtaining any consent required from their own customers before including them in an audience.

6. Sharing Data with Google and TikTok

In addition to Meta, a merchant may enable analytics and advertising integrations with Google and TikTok. As with Meta, this happens only for merchants who actively enable the integration, and only where the visitor's marketing cookie preference permits it:

• Google — when enabled, website and event data (such as page views, add-to-cart, and purchases) may be shared with Google Analytics (GA4) for traffic measurement and with Google Ads for conversion measurement and remarketing. Where audience matching is used, contact identifiers are hashed before transmission. This processing is governed by Google's Privacy Policy.
• TikTok — when enabled, the TikTok Pixel and/or Events API sends website events to TikTok to measure and optimize ad performance, and a merchant may build audiences from its own customer list using identifiers that are hashed before transmission. This processing is governed by TikTok's Privacy Policy.

Merchants are responsible for obtaining any consent required from their own customers before including them in an audience or enabling these integrations.

7. Other Third Parties

We share data with infrastructure and service providers strictly as needed to run the platform — for example hosting, email delivery (from posta.asistanx.com), payment gateways, shipping carriers, and marketplaces that a merchant integrates. We do not sell personal data.

8. Data Retention

We retain personal data for as long as an account is active or as needed to provide the service, and thereafter only as required to meet legal, tax, and accounting obligations or to resolve disputes. Data shared into a Meta Custom Audience is retained by Meta according to the audience's settings and can be removed as described in our Data Deletion Instructions.

9. Your Rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. To exercise these rights — including deletion of data shared with Meta — see our Data Deletion Instructions or contact us at [email protected].

10. Security

We apply technical and organizational measures to protect personal data, including encryption in transit (TLS), encryption of sensitive stored credentials, access controls, and monitoring. No method of transmission or storage is completely secure, but we work continually to protect your information.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.

12. Contact

For any privacy questions, contact us at [email protected] or via our contact page.