Privacy Policy

Scope and data controller

MagicPay Teknoloji A.Ş. operates this website and is the controller for the processing described here. This policy covers marketing pages, demo enquiries and website preferences. It is not a contract for payment products, customer accounts or payment transactions; separate terms and notices address those services.

Your demo enquiry

The demo form collects your name, company, email and product of interest; phone number and message are optional. The originating page and selected language accompany the enquiry. These details help us understand your needs, route your enquiry and respond.

Your enquiry is stored privately and forwarded to MagicCRM for a sales response. Requesting a demo does not subscribe you to marketing or change your cookie choices. Please omit card details, passwords and other people's information that is unnecessary for your enquiry.

For abuse prevention, an IP-derived HMAC rate-limit record is held for 10 minutes. This technical lifetime is not a retention period for demo records or infrastructure logs.

Optional analytics and advertising measurement

Google Analytics measures site use; Google Ads measures advertising conversions. These are independent choices, both off initially. No Google request for either service is sent before its relevant consent. Form text fields are never sent to Analytics or Ads.

Measurement uses page and event information and opaque conversion identifiers. Ads may receive an event UUID as transaction_id and permitted gclid, gbraid or wbraid advertising click identifiers. Network requests also expose IP and device context to the provider; these data should not be treated as anonymous.

Preferences stored in your browser

The necessary preference cookie remembers your choice for 180 days without a visitor ID. Theme and consent-signal entries in local storage have no automatic expiry; tab-session entries last for that session. See the Cookie Policy and inventory for details.

Withdrawing consent stops future measurement for that category and deletes the relevant optional cookies set by this site. It does not delete data already received by providers.

External links and video playback

Calendly, SoundCloud, social and press links take you to other websites. The YouTube player uses the nocookie domain and connects only after you click to load it, independently of cookie categories. Google Analytics and Ads choices remain separate. You can open the source link instead of loading the player and review the provider's privacy notice.

Loading a video or following an external link may disclose IP and device information to that service. Fonts are served locally without contacting an external font service.

Assessing retention needs

Retention considerations include the enquiry's purpose, ongoing correspondence, applicable legal requirements and your data-rights request. Expiry of browser storage does not mean that an enquiry or historical provider data has been deleted. You can identify the relevant record when requesting deletion.

Your personal-data rights

Under Türkiye's personal data protection law, KVKK, and subject to applicable conditions, you can ask us to:

• Explain whether and how your data is processed, its purpose, appropriate use and recipients domestically or abroad.
• Correct incomplete or inaccurate data, erase or destroy it where legally required, and notify recipients.
• Consider objections to adverse outcomes based solely on automated analysis and compensation claims for unlawful processing.

Contact and formal requests

For general enquiries, contact hello@magicpay.ai or +90 533 637 49 39. Formal KVKK requests must include the required information and use written or other legally recognised methods. An ordinary email is not automatically a procedurally valid request; contact us for guidance on the appropriate channel. Following the controller-request process, your right to complain to the Personal Data Protection Board remains subject to statutory conditions and deadlines.