TaxKolay

Privacy Policy

Version 1.1

On this page

This Privacy Policy gives a general explanation of the personal information processed by TaxKolay LLC, the operator of the TaxKolay brand, through https://taxkolay.com, the customer portal and its official communication channels.

1. About us

For data subjects in Türkiye, the detailed notice under Law No. 6698 on the Protection of Personal Data (KVKK) applies in addition, through the KVKK Privacy Notice.

2. Information we collect

Depending on the nature of the service, the following may be processed:

  • name, surname and contact details;
  • address and proof of residence or address;
  • date of birth and nationality;
  • passport, ID and selfie;
  • tax number, SSN, ITIN or other tax and identification numbers;
  • company ownership, shareholding, director details and company documents;
  • bank account details, bank statements, payment institution reports;
  • income, expense, sales, invoice and accounting records;
  • application and transaction records;
  • order, payment, refund and chargeback records;
  • customer support correspondence;
  • IP address, device and browser information, session and security logs;
  • cookie and marketing preferences.

TaxKolay does not intend to store full card numbers or CVV data in its own application database. Card payments are processed through Stripe's infrastructure.

3. Why we use this information

The information may be used mainly to:

  • create accounts and verify identity;
  • deliver the purchased service;
  • prepare company formations and official applications;
  • carry out tax, filing and accounting work;
  • coordinate Registered Agent, address and third-party services;
  • support applications to banks, fintechs and payment platforms;
  • collect payments and manage refunds and chargebacks;
  • provide customer service and handle complaints;
  • carry out security, fraud prevention, identity verification and sanctions checks;
  • meet legal obligations and defend legal rights;
  • send marketing communications where the user has chosen to receive them;
  • carry out analytics and advertising measurement to the extent the user permits.

4. Who we may share it with

To the extent necessary for the service, information may be transferred to:

  • public authorities in the US, the UK and other countries where services are provided;
  • Registered Agent, address or filing providers;
  • independent banks, fintechs and payment platforms;
  • Stripe, for payment processing;
  • Railway and related infrastructure providers, for hosting and databases;
  • Cloudflare, for files, CDN and security;
  • Google Workspace, for e-mail;
  • Meta and WhatsApp, for communication;
  • professional advisers, accounting or tax service providers, or legal authorities where required.

Sharing is limited to the purpose of the service and the relevant legal basis.

5. International data flows

TaxKolay LLC is a company established in the United States, and some of the technology and service providers it uses are located outside Türkiye. Personal information may therefore be processed or stored in different countries.

For data subjects in Türkiye, transfers abroad are carried out taking into account the transfer mechanisms under Article 9 of the KVKK and applicable secondary legislation. Regular transfer activities are not based solely on a general privacy text or a single bundled consent box; the necessary safeguards, contracts and administrative steps are applied separately.

6. Retention

Personal information is not kept for longer than is necessary for the purpose for which it was collected and for applicable legal obligations. Contract, payment and evidential records, tax and accounting working files, identity verification and risk records, and marketing and cookie consents may be subject to different retention periods.

Deleting an account does not mean the immediate destruction of records that must be retained for legal or dispute purposes. Data for which the processing condition has ended is erased, destroyed or anonymised in line with the applicable retention and destruction policy.

7. Security

TaxKolay applies, or aims to apply, appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse and unlawful processing — including role-based access, multi-factor authentication, TLS, private storage, short-lived signed URLs, access logging and secure backups.

No internet system can guarantee absolute security. If a security incident occurs, the investigation and notification processes required by law are applied.

8. Cookies

Non-essential analytics and advertising cookies are not run without the relevant legal basis or consent. Details are set out in the Cookie Policy.

9. Marketing

Responding to a user's "please contact me" request and sending later campaign or marketing messages are different purposes. The consents required for marketing messages are obtained separately and optionally; the user may withdraw them at any time.

10. Rights and contact

Data subjects in Türkiye may exercise their rights under the KVKK through the KVKK Privacy Notice and the KVKK Application Form.

For other privacy questions, you can reach us at privacy@taxkolay.com.

11. Governing language

The Turkish version of this document prevails. The English translation is provided for information purposes only; in the event of any discrepancy between the two, the Turkish version applies.