Legal

Privacy Policy

Last updated: September 16, 2026

This policy explains how Otovoi (the workshop management software offered at otovoi.com and app.otovoi.com) collects, processes and protects personal data. By using the service you confirm that you have read this text.

1. Who we are

Data controller: Otovoi, Fenerbahçe, Growth Plaza, Iğrıp Sk. No: 13, 34726 Kadıköy, Istanbul, Türkiye. Contact: [email protected] · +90 (850) 210 4715.

2. Nature of the service

Otovoi is multi-tenant software for auto repair, body shop, tire, electrical and similar service workshops. It digitizes job records, customer and vehicle cards, photos/documents, job line items, payments and cash processes. It is not a vehicle history lookup or public registry service.

3. Data we collect

• Account and membership: name, email, phone, password hash, role (owner, admin, employee), business details.
• Operational data entered by the business: customers (individual/corporate), plate and vehicle information, job notes, labor/part line items, invoice contents, uploaded images.
• Payment and subscription: plan, trial period, billing status (via the payment provider).
• Technical data: IP address, browser, device, session cookies, security and rate-limiting logs.

Data about a workshop's customers is, as a rule, processed on behalf of that business. Otovoi acts as data processor for that data and as data controller for its own subscription and account records.

4. Purposes of use

• Account creation, sessions, permissions and multi-tenant isolation
• Providing the job, customer, finance and file features
• Password reset and support emails
• Subscription, billing and prevention of abuse
• Legal obligations (e.g. invoicing and record retention)

5. Sharing and infrastructure

Data may be transferred to the infrastructure providers we use to operate the service (hosting, object storage, email). These transfers are limited by contract and security measures. Disclosures may be made to public authorities where legally required or on a legitimate request.

6. Retention and security

Account and job data is kept for the duration of the subscription and the legal retention periods. Deletion requests are fulfilled to the extent they do not conflict with legal archiving obligations. Access control, tenant isolation, encrypted transport (HTTPS) and upload quotas are applied; absolute security cannot be guaranteed for transmission over the internet.

7. Your rights

For your rights of access, rectification, erasure, objection and complaint under the KVKK (Turkish Personal Data Protection Law), see the KVKK Privacy Notice. Requests: [email protected].

8. Children

The service is not intended for users under 18. We do not knowingly collect children's data.

9. Changes

We may renew this policy by updating the date on this page. Significant changes may be notified by email.

This text is for general information; in a specific dispute, your lawyer's opinion should prevail.

This English text is a courtesy translation. If there is any discrepancy, the Turkish version prevails.