Privacy Policy

TrustLayer · İstanbul / Türkiye · security@trustlayersec.com. This policy covers the trustlayersec.com marketing site. Data processed inside customer deployments of the TrustLayer product is not its subject; that is governed by the data processing agreement signed with the customer.

The site was measured. It writes no cookies, saves nothing to browser storage, runs no analytics or advertising tools, and makes no third-party requests; every asset, fonts included, is served from our own infrastructure. No profile is built from your visit. The only point of collection is the demo request form, and that form does not submit to a server either: what you type stays in your browser, and pressing the button opens your own email client with a prepared draft. If you do not send it, nothing reaches us.

What reaches us is used only to reply to your request, answer your questions and work out a suitable deployment. The legal grounds are that processing is directly related to the formation of a contract (KVKK art. 5/2-c) and legitimate interest (art. 5/2-f). Because it does not rest on consent, the form carries no consent checkbox.

Demo and contact correspondence is kept for three years and deleted at the end of that period. You can ask for it to be deleted sooner.

Email you send reaches our mailbox on Google Workspace. Google's servers are outside Türkiye, so this is a transfer abroad, carried out under the Cloud Data Processing Addendum agreed with Google and the standard contractual clauses it incorporates. Beyond that your data is shared with no one and never sold.

Our only sub-processor is Google Workspace, used as corporate mail infrastructure. The site itself connects to no third-party service. If a sub-processor is added, this policy is updated.

The site is served statically and hosts no backend holding visitor data; having nothing to store is the strongest measure available. Emails that reach us are held in corporate mail accounts protected by two-step verification, and only the people answering the request have access.

You can exercise your rights under KVKK art. 11 by writing to security@trustlayersec.com; your request is answered within thirty days at the latest. The full list of rights is in the privacy notice.

When this policy changes, the effective date is updated. If an update changes how the site handles data — analytics being added, say — it is published here before it takes effect.