Privacybeleid

1. Information we collect

• Account details: first and last name, phone, email, business name and address.
• Business data you enter in the app: services, staff, work schedules, appointments, client records and payments.
• Payment details: subscription and invoice records. Card details are processed directly by iyzico; we never store your full card number.
• Technical data: IP address, device and browser type, session logs, error logs.
• Communications: contact form, email and support messages.

2. How we use information

• To provide the service, manage your account and run app features (e.g. sending appointment details to your client via WhatsApp),
• To handle subscriptions, payments and invoicing,
• To provide support and send important service notices,
• To keep the service secure, prevent abuse and fix errors,
• To meet our legal obligations.

We do not sell or rent your data, and we do not share it with third parties for advertising.

3. Sharing

Your information is shared only as far as the service requires: with the payment institution (iyzico), hosting and database infrastructure, email and messaging services (WhatsApp Business), accounting and e-invoicing providers, and with competent authorities where required by law. Our service providers process data only on our behalf and according to our instructions.

4. Data of salon clients

Businesses record their own clients’ details in 3 Numara. The business owns this data and is its data controller; we process it only to provide the service to the business and never use it for any other purpose. Businesses are responsible for informing their clients and obtaining any required consents.

5. Security

All traffic between you and the website and app is encrypted with SSL/TLS. Data is kept on servers with access limited by authorization, each business’s data is separated from others and backed up regularly. Role-based permissions in the app let you decide what each staff member can see.

6. Retention

Account details and business data are kept while your account is open. When an account is closed, data is deleted or anonymized within a reasonable time, subject to the retention periods required by tax and commercial law (up to 10 years for invoices and commercial records).

7. Users outside Turkey

If you use the service from the European Union or the United Kingdom, you may also exercise your rights of access, rectification, erasure, restriction, objection and data portability under the GDPR, and lodge a complaint with your local data protection authority.

8. Children

3 Numara is a service for businesses and is not directed at anyone under 18.

9. Changes and contact

We may update this policy; we will announce significant changes in the app or by email. For questions, write to [email protected].