Privacy Policy

We collect only the data needed to run the service. We don't sell your data, use it for advertising or share it with third parties.

The data controller is Bumba Teknoloji Limited Şirketi (Ataşehir, Istanbul); details are in the KVKK Privacy Notice.

When you connect your Google or Microsoft account, we only get permission to send email on your behalf. We don't read your mailbox or download your messages. You can revoke the permission with one click on your Profile page.

The access keys we receive for this permission are stored encrypted and used only to send your messages.

The CV you upload is kept in a private area and can be viewed only through the unguessable link we generate. The link is closed to search engines. You can renew the link or delete your CV at any time.

For text correction, we send the text you write to an AI provider. The content sent is not used to train models. We always keep your original text in your own record; the corrected version is kept separately.

The logbook and organisation analysis are excluded: what you write and the documents you upload there are never sent to an AI provider under any circumstances. The meeting note and the full export are produced by passing on what you wrote exactly as it is.

The logbook and organisation analysis pages are yours alone. No other member can see these records, and neither can administrators. This isn't a promise in words but a rule of the database itself: every row is tied to your account and access is restricted at row level. The supporting documents you upload are protected in the same way and are served behind a login check, not at an unguessable address.

If you enter your colleagues' information here, you are responsible for that data; details are in the KVKK Privacy Notice.

We use only the cookies that are strictly necessary for the site to work. We don't use advertising or tracking cookies.

• Session cookie: keeps you logged in. Scripts in the browser can't read it (httpOnly); it becomes invalid when you log out or after 30 days.
• Language preference (dil): remembers your choice for 1 year when you change the language yourself.
• Theme preference (tema): remembers your light or dark theme choice for 1 year; the same setting is also kept in the browser's local storage.
• Short-lived process cookies: a cookie carrying only the name of the event, used to count the statistics event on the page after login and sign-up (olay, 2 minutes), and a cookie carrying the language of the return page while you connect your email account (oauth_dil, 10 minutes). Neither contains personal data.

We use Umami for visit statistics. Umami doesn't use cookies and doesn't store personal data or IP addresses. Page addresses are sent without the query string; admin pages and CV links are never sent. Umami runs on Bumba Group's own server (istatistik.bumba.tr, Istanbul).

What you type in the search box is kept for 90 days, without recording who searched, so that we can see the most searched and unanswered topics. If you are logged in, the search also covers your own records; only you can see those results.

The site footer has a form for joining Bumba Group's shared email list. The list is managed by Bumba Group; you confirm your subscription by email and can leave with one click using the link in every email. The list's privacy notice: https://bumbagroup.com/liste/aydinlatma?dil=en

Becoming a member doesn't mean joining the list. You join the list only if you fill in the form and give your consent.

You can delete your account from your Profile page. Deletion can't be undone and covers all your data. For help, write to bilgi@bumbagroup.com.