Privacy policy

Visit statistics record the following actions: sending the contact form, creating an account, using a link to request a service or to try the platform, starting an analysis, opening an analysis from your history or retrying it, showing that a map layer has expired, and downloading a file. Beyond the visit information listed above, an action record contains only this limited information about the action: the selected subject and service; where the link sits on the page and whether it leads to guest use or to the sign-up page; whether the account was created from guest use; the analysis type, dataset, and status (for a failed analysis, the type of error); and the type of file downloaded. These records do not include the name, email address, or message you write in forms, or parcel boundaries. We use the records only for aggregate statistics; we do not use them to identify you or to build a profile of you.

Parcel boundaries count as personal data because they are kept with your account and point to a specific property. We do not ask for special categories of personal data (such as health data or beliefs); please do not include this kind of information in forms or files.

If you start as a guest, we do not collect your name or email address. A guest session with no name or email address is stored in your browser, and your work is saved with this session.

If you upload other people's personal data to the platform (for example, parcel files that carry growers' names), you are the data controller for that data; we process it on your behalf only to provide the service. It is your responsibility to inform these people and to have the necessary legal ground.

None of our processing is based on explicit consent. We do not send marketing emails, and we do not use cookies for advertising or profiling. We do not make decisions about you based solely on automated processing; analyses are run on parcels using satellite data.

We collect your data electronically: directly from you through forms and the files you upload, and automatically through server logs, error logs, cookies, and browser storage while you use the website and the platform.

We run the platform on the infrastructure of service providers we work with, not on our own servers. We transfer your data only to the following groups of recipients, for the purposes given:

• Infrastructure providers (hosting, database and authentication, file storage, backups, visit statistics): to provide the platform and to store and back up your data.
• A satellite data processing service: to run your analyses. Only parcel boundaries are sent to this service.
• Email services: to send you emails and to answer contact form messages.
• Security and error logging services: to fix errors and prevent abuse.
• Public authorities and courts with legal authority: only as far as they request and our legal obligations require.

Our providers process your data on our behalf and on our instructions. Their servers are outside Türkiye, mainly in the European Union and the United States. If you would like to know which providers your data is transferred to, you can contact us.

If you are in an organization account, other members can also see the parcels added to the organization and the jobs started on its behalf; only you can see the analyses you start yourself. The base maps load directly into your browser from the services named in the corner of the map; your IP address is passed to these services when they load.

We keep your data only as long as needed. The periods below are maximums:

• Account, parcel, analysis, and acceptance records: for as long as your account stays open. They are deleted as soon as your account is deleted.
• Guest data: deleted 14 days after last use.
• Session information: deleted when the session ends or the account is deleted.
• Contact correspondence: 1 year after your request is resolved.
• Server, security, and error logs: up to 90 days.
• Backups: up to 6 months; deleted copies stay in the trash for 30 more days. Even if your account is deleted, your data stays in backups until this period ends. If we restore a backup, we delete any deleted accounts again.

When a period ends, we delete the data or make it anonymous.

The website has no advertising or marketing cookies and no cookies that track you on other websites. We use our own cookies and browser storage only to make the service you asked for work or to remember a choice you made, so we do not ask for separate permission.

• Session cookies: keep you signed in when you sign in or start as a guest, and make email sign-in secure. If you select "Remember me", they stay for 400 days after your last visit; otherwise, they are deleted when you close the browser. A guest session ends 14 days after last use.
• Preference records: your language choice, whether you have seen the introduction card, and your notification sound preference. They stay in your browser until you delete them.

Visit statistics use no cookies and store no data that identifies you. You can delete cookies in your browser settings. If you delete the session cookie, you are signed out; if you delete it while you are a guest, you can no longer reach your guest work.

To protect your data, we encrypt connections (HTTPS); in the database, we make sure each user can reach only the records they are authorized for; we do not send IP addresses, cookies, or form contents to error logs; and we apply request limits. Our database and file storage providers keep data encrypted at rest. If we learn of a data breach, we notify the Personal Data Protection Board within 72 hours and the people affected as soon as possible.

Under Article 11 of the KVKK, you have the right to:

• learn whether your personal data is processed and, if so, request information about it;
• learn the purpose of processing and whether the data is used in line with that purpose;
• know the third parties in Türkiye or abroad to whom the data is transferred;
• ask for the data to be corrected if it is incomplete or inaccurate;
• ask for the data to be erased or destroyed under the conditions in Article 7 of the KVKK;
• ask for the correction, erasure, or destruction to be notified to the third parties to whom the data was transferred;
• object to a result against you that arises solely from analysis by automated systems;
• claim compensation if you suffer damage because of unlawful processing.

Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your request in one of these ways:

• by email signed with a secure electronic signature or a mobile signature: iletisim@terrascane.com;
• from the email address you gave us earlier and that is registered in our system: iletisim@terrascane.com;
• by a written petition with a wet-ink signature: you can ask for our mailing address at iletisim@terrascane.com.

Your request must include your full name, your signature for written requests, your Turkish ID number (if you are a foreign national, your nationality and your passport number or, if you have one, your ID number), your residential or business address for notifications, your email address, telephone, and fax number if you have them, and the subject of your request. Attach any information and documents related to your request. For written requests, the application date is the date the petition is served on us; for the other methods, it is the date the request reaches us.

We resolve your request free of charge as soon as possible, depending on its nature, and within 30 days at the latest. If the action involves an additional cost, we may charge the fee in the tariff set by the Board. You can also ask for your account to be deleted in these ways.

If your request is rejected, if you find the answer inadequate, or if you receive no answer within 30 days, you can file a complaint with the Personal Data Protection Board within 30 days of learning the answer and, in any case, within 60 days of the application date.

When we update this notice, we publish the new version on this page and change the "Last updated" date. We tell you about important changes the next time you sign in to the platform.