Privacy notice

Data controller. The GESO platform, website, and mobile and desktop apps are operated by Dilruba Açıl (DADA Creative, Ankara, Turkey). Businesses that use the platform are the data controllers for their own guests' data; we process that data on their behalf. Contact: kvkk@geso.app

Data processed on this site. The name, business name, phone number and email you give in the demo request form are processed only to contact you about the demo. They are not added to marketing lists, and they are deleted within 6 months at the latest after your request is concluded.

Account and app data. When you use the platform or the app we process your email, name, business name and team member details; content you add, such as photos, invoices and voice notes; your device's push token if you turn on notifications; and basic usage data, such as the pages you view in the panel. Page logs are kept for 180 days and can be seen by members of the same business. We do not use this data for advertising or to track you across other apps and websites.

Camera and microphone. The app asks for the camera only to photograph invoices and receipts and to scan QR codes, and for the microphone only to record a voice note you start yourself. Neither runs in the background, and you can withdraw permission in your device settings at any time.

Business and guest data. Google reviews, survey answers, delivery platform notifications and looply loyalty membership data (name, phone, card number, points and visits) are processed on behalf of businesses. In surveys, a guest's contact details are collected only if the guest explicitly consents.

Purpose, legal basis and collection. We collect data electronically through forms, the app, the till and the integrations you connect, in order to provide the service, manage your account, keep it secure and meet legal obligations. Our legal bases under Article 5 of KVKK are performing a contract, legal obligation and legitimate interest; in other cases we ask for your explicit consent.

Service providers and storage. Data is stored on servers in the United States with Supabase. We use Vercel for hosting, Resend for email, Google to connect your Business Profile and for Google Wallet passes, Apple for notifications and Apple Wallet passes, Meta for WhatsApp alerts, and Anthropic and OpenAI through Vercel AI Gateway for AI features such as review analysis, reading invoices and transcribing voice. Guest names and phone numbers from survey and loyalty records and Google reviewers' names are not sent to AI providers; phone numbers and emails in review text are masked before sending. Invoices and images you upload are processed as they are, because the feature needs them. AI requests are set to no model training and no retention by the provider; voice transcription uses the no-training setting only. Providers may process data outside Turkey and your country, mainly in the United States. We do not sell your data.

Retention and deletion. We keep data for as long as your account exists. You can delete your account yourself in the app or on the web, or ask us by email. After a trial or subscription ends, data is kept for at least 90 days and may then be deleted. We may keep records we are legally required to keep, such as invoices, for the legal period.

Age. GESO is a tool for business users; business accounts are not directed at anyone under 18.

Your rights. You can exercise your rights under Article 11 of KVKK, Turkey's Personal Data Protection Law (to learn whether your data is processed and who receives it, and to request information, rectification and erasure, object to automated analysis, and claim compensation), by writing to kvkk@geso.app. Requests are answered within 30 days. For now, the service is not offered to businesses in the EU/EEA or the United Kingdom; we still answer data requests from there.

Cookies. This marketing site uses only a region preference cookie kept for 180 days; there are no tracking or advertising cookies.