Privacy Policy and KVKK Notice

1. Controller and scope

Soolist is operated by the data controller listed on this page. For KVKK purposes, that controller is responsible for personal data processed through Soolist unless a separate notice says otherwise.

• Service: Soolist, a product for organizing ratings, categories, topics, collections, profiles, and shared spaces.
• Contact for privacy requests: [email protected].

2. Information we collect

We collect the information needed to run your account and keep your Soolist library working. This may include:

• Account details, such as your name, username, email address, password hash, language preference, and verification state.
• Profile details you add, such as a bio, avatar, and public profile information.
• Content you create, such as categories, topics, rating scales, weighted dimensions, ratings, dates, notes, collections, and visibility settings.
• Social and shared-space information, such as friendships, invitations, memberships, roles, and activity related to shared spaces.
• Messages you send us for support, feedback, bug reports, or account help.
• Technical information needed for security and reliability, such as session data, cookies, IP address, device/browser details, request logs, and error logs.

3. Collection method and legal basis

We collect personal data electronically through the website and app, including registration forms, account settings, content creation flows, uploads, cookies, logs, support messages, and security events. Our legal bases may include:

• Performance of a contract or service relationship when data is needed to create your account and provide Soolist.
• Legitimate interests, such as security, fraud prevention, debugging, product reliability, and abuse handling.
• Legal obligations where recordkeeping, lawful requests, user rights, or security notifications require processing.
• Explicit consent where a specific optional processing activity legally requires it; acceptance of this notice is not treated as separate explicit consent.

4. How we use information

We use your information to operate Soolist and make the product useful. In practice, that means we use it to:

• Create and secure your account, authenticate you, and keep sessions working.
• Save, show, search, sort, and sync the ratings, collections, topics, spaces, and profile details you create.
• Apply your visibility choices, including private, unlisted, friends, shared-space, and public views.
• Respond to support requests, send service emails, and communicate important account or security information.
• Maintain the service, investigate bugs or abuse, protect users, and improve reliability.

5. Visibility and sharing

Some Soolist content can be private, visible only through a link, visible to friends, visible inside a shared space, or public. Your display name, username, avatar, public profile, and content marked public may be visible to other people. Do not put sensitive personal information into content you mark public or share with others.

6. Cookies and technical data

We use essential cookies and similar storage to keep you signed in, protect forms, remember preferences, and run the app. We do not use advertising cookies. Technical logs help us secure and debug the service.

• Session and security cookies keep authentication and CSRF protection working.
• Preference data may remember choices such as locale, theme, or interface state.
• Server logs may include IP address, user agent, URL, timestamps, and error details.

7. Transfers and service providers

We do not sell your personal data. We may transfer limited data to the service provider categories shown on this page when they help us provide hosting, storage, email, security, logs, backups, analytics-free operational monitoring, or support. Some providers or infrastructure may be outside your country. We may also disclose information if required by law, to protect the service, or to respond to abuse or security issues.

8. Retention and deletion

We keep account and content data while your account is active or as needed to provide the service. You can update or delete many things directly in Soolist, and you can request a data copy or account deletion from account settings. If you ask us to delete your account, we will delete or anonymize personal account data where reasonably possible, subject to backups, legal obligations, security logs, and records needed to resolve disputes.

9. Your KVKK and privacy rights

Depending on where you live, including under KVKK Article 11 where applicable, you may use account settings or contact us to exercise rights such as:

• Learning whether your personal data is processed.
• Requesting information if your personal data has been processed.
• Learning the purpose of processing and whether data is used in line with that purpose.
• Learning the third parties to whom personal data is transferred domestically or abroad.
• Requesting correction of incomplete or inaccurate personal data.
• Requesting deletion, destruction, or anonymization where the legal conditions are met.
• Requesting that correction or deletion operations be notified to third parties to whom data was transferred.
• Objecting to automated analysis that produces a result against you.
• Requesting compensation if you suffer damage because of unlawful processing.

10. Children

Soolist is not intended for children under 13 or for anyone below the minimum age required in their region. If you believe a child has provided personal information to us, contact us and we will take appropriate action.

11. Contact and requests

Questions about privacy, KVKK requests, or your data can be sent to [email protected].

We review privacy requests and respond as soon as practical, and within 30 days where KVKK applies.