هذه الصفحة متاحة باللغتين الإنجليزية والتركية فقط. يُعرض النص الإنجليزي أدناه.

Privacy Policy

Last updated: October 19, 2026

1. Introduction

Workify360 ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide when you:

  • Register for an account
  • Subscribe to our newsletter
  • Request a demo or contact us
  • Make a purchase or subscription

This information may include: name, email address, phone number (including your mobile phone number), company name, job title, and billing information.

When you create an account yourself on our sign-up page, we ask for your name and email address, and you may also give your mobile phone number; the mobile phone number is optional. If you give it, it is part of your account data: you can change or remove it in your profile, the owner and the admins of your organization can see it, it is included when you request a copy of your data, and it is erased together with your account. People who join through an invitation, single sign-on or SCIM provisioning may add it, but are not required to.

2.2 Usage Data

When you use our services, we automatically collect certain information including:

  • Device information (browser type, operating system)
  • IP address and location data
  • Pages visited and features used
  • Time spent on our platform
  • Referring website addresses

2.3 Productivity Data

Our productivity tracking software collects data about application usage, active/idle time, and work patterns. This data is processed according to your organization's settings and our data processing agreements.

2.4 Call-back Requests

When you send the "Sizi arayalım" (call me back) form on our website, we receive your name, your phone number, your company name, the number of employees if you give it, the address of the page you sent the form from and, if you came to the site through an ad or a campaign link, the campaign tags (UTM parameters; and the Google Ads click id if you allowed marketing cookies).

We use this information only to call you back about Workify360 as you asked and to see which campaign the request came from. Your request is sent by e-mail to our team through our e-mail service provider Brevo (Sendinblue SAS, France); our website keeps no other copy of it. We delete the e-mail when the request has been handled, and within six months at the latest. Instead of sending the form you can also call us at +90 216 606 65 86; see section 8 for your rights.

2.5 Setup Help During the Trial

When you create a company account on our sign-up page, you are the owner of the account. During the trial we may contact you at the e-mail address you gave when signing up and, if you gave one, at your mobile phone number, to help you set up and start using Workify360. The sign-up form also says so under the phone field ("We may call you to help with setup.").

For this we use, from your account data, your name, your e-mail address and whether you have verified it, your mobile phone number, your language, your company name, the date the account was created, the end of the trial, whether data has started to arrive in the account and, if the sign-up came through an ad or a campaign link, the campaign tags (source and keyword). We send the setup e-mails through our e-mail service provider Brevo (Sendinblue SAS, France); our team makes the calls. If you do not want these e-mails or calls, write to info@verfay.com or tell us on the call, and we will not contact you about the setup again. See section 8 for your rights.

3. How We Use Your Information

We use the collected information for the following purposes:

  • Service Delivery: To provide, maintain, and improve our services
  • Communication: To send you updates, security alerts, and support messages
  • Setup Help: To help the account owner set up by e-mail or phone during the trial (see 2.5)
  • Analytics: To understand how users interact with our platform
  • Personalization: To customize your experience and provide relevant content
  • Security: To detect, prevent, and address technical issues and fraud
  • Legal Compliance: To comply with applicable laws and regulations

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information. These include:

Necessary Cookies

Essential for the website to function properly. These cannot be disabled.

Analytics Cookies

Help us understand how visitors use our website. We use Google Analytics (Google LLC) for this, and only after you accept analytics cookies; it then receives your IP address, browser and device details and the pages you visit. Google Analytics is listed with our other subprocessors.

Campaign Tags (UTM)

When you reach our website from an ad or a campaign link, the address may contain campaign tags that show which channel brought you (UTM: source, medium, campaign, keyword and content). These tags are campaign-level and do not identify you. We keep them without asking for your consent: not in a cookie, but in your browser's session storage for this visit (sessionStorage), and we pass them to the sign-up page. If you create a company account in that session, they are stored with the new account to measure which channel brought the sign-up and to help you set up during the trial (see 2.5). We do not send the campaign tags to Google. The tags in session storage are deleted when you close the browser tab.

Marketing Cookies

Used to track visitors across websites to display relevant advertisements.

When you reach our website from a Google Ads ad, the address also contains the Google Ads click ID (gclid, gbraid or wbraid). We keep the click ID only if you accept marketing cookies: not in a cookie, but in your browser's session storage for this visit (sessionStorage), and we pass it to the sign-up page. If you create a company account in that session, the click ID is stored with your company account for ad measurement; the account sign-up and the first data the account receives are reported to Google Ads (Google LLC) as conversions together with the click ID. We do not send your name, your e-mail address or the campaign tags to Google. When you withdraw marketing consent, the click ID is deleted from your browser; the campaign tags stay. Google Ads is listed with our other subprocessors.

If you accept marketing cookies, we load the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) to measure the effect of our LinkedIn ads. LinkedIn then receives your IP address, browser and device details, the pages you visit and its own cookies; if you have a LinkedIn account, it may match your visit to that account. While your marketing consent stands, we add a marker of it (marketing=1) to the sign-up links; if you create a company account through such a link, the page right after your organization is created also loads the LinkedIn Insight Tag and reports the sign-up to LinkedIn as a conversion. We do not send your name, your e-mail address or your company's name to LinkedIn. We only receive aggregated reports and conversion counts that do not identify you. Without marketing consent the tag is not loaded; when you withdraw consent, it is no longer loaded from the next page on. LinkedIn is listed with our other subprocessors.

You can manage your cookie preferences through our cookie consent banner or your browser settings.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following situations:

  • Service Providers: With third-party vendors who help us operate our business (see the list of subprocessors)
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • Legal Requirements: When required by law or to protect our rights
  • With Your Consent: When you have given us explicit permission

6. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication mechanisms
  • Employee training on data protection

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, it is securely deleted or anonymized.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data
  • Restriction: Request limitation of processing
  • Portability: Request transfer of your data to another service
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw previously given consent

To exercise these rights, please contact us at info@verfay.com

9. International Data Transfers

The service providers we use to run our services and this website (subprocessors) may process your information outside Turkey. Article 9 of the Turkish Personal Data Protection Law (KVKK) allows such transfers under the standard contract published by the Personal Data Protection Board. We are putting this contract in place with each of these providers, and each signed contract is notified to the Personal Data Protection Authority within five business days.

Our list of subprocessors names each provider, the personal data it receives, where it processes that data and whether its standard contract is in preparation, signed or notified.

10. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Workify360 · VERFAY YAZILIM VE TEKNOLOJİ ANONİM ŞİRKETİ

Address: Cevizli Mah. Zühal Cad. A Ticari Blok Apt. No:46/50 Maltepe İstanbul

Email: info@verfay.com

Website: workify360.com

GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). This includes:

  • Processing data only with a lawful basis
  • Honoring data subject rights within 30 days
  • Maintaining records of processing activities
  • Implementing data protection by design
  • Notifying authorities of data breaches within 72 hours

KVKK Compliance (Turkey)

For users in Turkey, we comply with the Personal Data Protection Law (KVKK - Law No. 6698). Your rights include:

  • Learning whether your personal data is being processed
  • Requesting information about processing if your data has been processed
  • Learning the purpose of processing and whether data is used accordingly
  • Knowing the third parties to whom your data is transferred domestically or abroad
  • Requesting correction if your personal data is incomplete or inaccurate
  • Requesting deletion or destruction of your personal data