Payment data disclosure
What personal data is processed when you pay for Solab, why, who sees it, and how long it is kept — a KVKK aydınlatma metni, not a certification claim.
Last reviewed 27 July 2026
Data controller
Solab’s full seller identity — legal name, registered address, phone, e-mail, MERSIS number and tax office — is not published on this page yet. We would rather show nothing than a placeholder, so this block appears here as soon as those details are confirmed. Ask us and we will give them to you directly in the meantime.
What this page is
This is a disclosure about the personal data Solab processes when you buy or renew a paid subscription. It complements the main privacy page rather than replacing it. It is a disclosure, not a certificate: we do not claim KVKK, GDPR, SOC 2 or ISO 27001 certifications we do not hold.
Data controller
The data controller for the payment data described here is the seller identified on this page — the same entity named in the distance selling agreement and on your payment receipt.
What is processed for a payment
For each order: the order reference, the amount charged in Turkish lira, the plan price in US dollars and the exchange rate applied, the plan and billing interval, the payer e-mail, the payment status and the reason if it failed, and the created / updated / settled timestamps. For a subscription that renews automatically we additionally hold the last four digits of the card, the card brand, and an encrypted reference token supplied by the payment provider.
What never reaches us
Your full card number, expiry date and security code are entered on the payment provider’s own hosted page and are never sent to, or stored by, Solab. The reference token we hold for automatic renewals is encrypted at rest and can only be used to request another charge on that card through the provider — it cannot be turned back into card details.
Why it is processed
To perform the subscription contract you entered into — taking the payment, activating the plan and renewing it; to keep the order and financial records that commercial and tax law require; and to investigate a dispute, a chargeback or suspected fraud when one arises.
Who it is shared with
The payment provider that processes the transaction, the banks in the payment chain, and the authorities, accountants or auditors we are legally obliged to answer. Payment data is not sold, and it is never sent to the AI gateway — the AI boundary only ever receives the content you ask Solab to process.
How long it is kept
Order and payment records are kept while the account exists and for the period commercial and tax law requires afterwards. The stored card reference is deleted at the payment provider when you cancel the subscription, and the corresponding record is cleared on our side at the same time.
Your rights
Under Article 11 of the KVKK you can ask whether your personal data is processed, request information about it, ask for it to be corrected or deleted, and object to a result produced solely by automated analysis that works against you. You can export your account data and delete your account yourself from Settings at any time; for anything else, contact us with the account e-mail.
Changes
We update this page when what we process or who we share it with changes. It is informational and written in plain language; where a detail is still unknown we say so rather than guessing.
Related pages