GOLIVE PRIVACY AND PERSONAL DATA PROTECTION POLICY

Last Updated: July 1, 2026

1. Introduction

GOLIVE YAZILIM HİZMETLERİ A.Ş ("Golive", the "Company", "we", "us", or "our") respects the privacy of its users, customers, business partners, employees, visitors, and other individuals who use its digital products and services and is committed to protecting their personal data.

This Privacy and Personal Data Protection Policy ("Privacy Policy") explains how personal data may be collected, used, processed, stored, protected, and, where necessary, shared through the services provided by Golive, including:

This Privacy Policy serves as the general privacy policy for the digital products and services developed, published, managed, or operated by Golive, including mobile applications distributed through application stores such as Google Play.

Golive processes personal data in accordance with applicable data protection legislation, including the Turkish Personal Data Protection Law No. 6698 ("KVKK"), where applicable.

2. Data Controller

For the purposes of applicable personal data protection legislation, including KVKK, the data controller is:

GOLIVE YAZILIM HİZMETLERİ A.Ş

Address: Ataşehir, Erzincan Sk. No:26, 34758 Ataşehir/İstanbul

Website: https://golive.com.tr

Email: [email protected]

This Privacy Policy may be updated if the Company's registered name, address, contact information, services, or data processing activities change.

3. Scope of This Privacy Policy

This Privacy Policy may apply to:

The categories of personal data processed may vary depending on the nature and functionality of the relevant product, service, website, or mobile application.

Golive aims to process only the personal data necessary for providing its services, ensuring security, supporting business operations, and complying with applicable legal obligations.

4. Personal Data That May Be Processed

Depending on the service, product, website, or application used, Golive may process the following categories of personal data.

4.1. Identity Information

Depending on the nature of the relevant service, the following information may be processed:

4.2. Contact Information

The following information may be processed where necessary:

4.3. User Account and Authentication Information

Where a Golive service requires a user account, the following information may be processed:

Appropriate technical and administrative measures are implemented to protect account and authentication information.

5. Data That May Be Processed by Mobile Applications

Mobile applications developed, published, or operated by Golive may access or process certain information depending on the features offered by the relevant application.

5.1. Device and Technical Information

Mobile applications may process technical information such as:

Such information may be used primarily for security, troubleshooting, technical support, application improvement, system monitoring, and performance optimization.

5.2. Application Usage Information

Depending on the relevant application, the following information may be processed:

This information may be processed for the purposes of providing, maintaining, securing, and improving the relevant services.

6. Mobile Device Permissions

Golive mobile applications may request certain device permissions depending on the functionality of the relevant application.

Permissions that are not required for the operation of an application are not intended to be requested unnecessarily.

Camera

Camera access may be requested for functions such as:

Location

Approximate or precise location information may be processed for purposes such as:

Applications that do not require location information are not intended to request location access unnecessarily.

Photos, Media, and Files

Access to photos, media, documents, or other files may be requested where users need to:

Bluetooth and Nearby Devices

Bluetooth or nearby device access may be used where a Golive application needs to communicate with devices such as:

NFC

Where an application provides NFC-based functionality, NFC may be used for purposes such as:

Notifications

Golive applications may request permission to send notifications such as:

Users may manage notification permissions through their device settings where supported by the operating system.

7. Purposes of Processing Personal Data

Personal data may be processed for one or more of the following purposes:

Personal data is intended to be processed in a manner that is relevant, limited, and proportionate to the purposes for which it is collected.

8. Methods of Collecting Personal Data

Personal data may be collected through electronic and, where applicable, physical methods, including:

The particular method used depends on the relevant service and the user's interaction with Golive.

9. Legal Grounds for Processing Personal Data

Personal data may be processed based on the applicable legal grounds set out under relevant data protection legislation, including Articles 5 and, where applicable, 6 of KVKK.

Legal grounds may include circumstances where:

Where applicable law requires explicit consent, personal data will be processed based on the valid consent of the relevant individual.

10. Sharing and Transfer of Personal Data

Golive does not unlawfully sell personal data or permit unauthorized commercial use of personal data.

Where necessary for providing services, maintaining infrastructure, performing business processes, or complying with legal obligations, personal data may be shared with or transferred to:

Any transfer is intended to be limited to what is reasonably necessary for the relevant purpose and carried out in accordance with applicable law.

11. Third-Party Services

Golive websites, software products, and mobile applications may use third-party technologies depending on the nature and requirements of the relevant service.

These may include:

Such third-party providers may process limited technical or personal data where necessary to provide their respective services.

Golive aims to evaluate the privacy and security practices of third-party service providers where reasonably possible and to use such services in accordance with applicable privacy and data protection requirements.

12. Google Play and Other Application Stores

Android applications developed or published by Golive may be distributed through Google Play.

Applications may also be distributed through other application stores or enterprise distribution platforms.

Google Play and other application store operators may independently process certain user, account, transaction, and device information in accordance with their own privacy policies and terms.

For applications published by Golive, this Privacy Policy also applies to personal data processing activities performed by Golive in connection with those applications.

Information provided in the Data Safety section of Google Play is declared separately for each application according to the data collection, sharing, storage, and security practices applicable to that particular application.

Where the privacy requirements of a particular application differ from this general Privacy Policy, Golive may provide additional application-specific privacy notices or disclosures.

13. Data Security

Golive applies appropriate technical and administrative measures designed to protect personal data against:

Depending on the relevant service, these measures may include:

Golive aims to ensure that access to personal data is limited to individuals who require such access for legitimate business purposes.

No method of transmission over the Internet or method of electronic storage, however, can be guaranteed to be completely secure.

14. Data Retention and Deletion

Personal data is retained only for as long as reasonably necessary for the purposes for which it was processed and in accordance with applicable legal retention requirements.

The applicable retention period may depend on:

When the purposes requiring processing cease to exist and there is no separate legal requirement to retain the relevant information, personal data may be:

in accordance with applicable law and Golive's data retention procedures.

15. User Account Deletion

Where a service or application provided by Golive allows users to create an account, users may request deletion of their account and associated personal data in accordance with applicable legislation and the functionality of the relevant application.

Where applicable, an account deletion request may be submitted through:

Following a valid account deletion request, personal data associated with the relevant account will be deleted or anonymized, except for information that Golive is legally required or otherwise legally permitted to retain.

Information that must be retained for legal, regulatory, security, fraud prevention, dispute resolution, or similar legitimate purposes may be retained for the applicable period.

Merely suspending or deactivating an account does not necessarily constitute account deletion.

16. International Transfers of Personal Data

Certain service providers used by Golive may operate infrastructure, servers, or data centers outside Türkiye.

Such services may include:

Where personal data is transferred outside Türkiye, Golive intends to conduct such transfers in accordance with applicable data protection legislation and any applicable requirements governing international transfers.

Appropriate safeguards may be implemented where required by applicable law.

17. Children's Privacy

Unless a particular Golive product or service is specifically designed for children, Golive does not intentionally seek to collect personal data from children through its general business applications and services.

If a Golive application is specifically designed for or directed toward children, applicable legal requirements and relevant application store policies relating to children, families, privacy, advertising, and data protection will be applied separately.

If Golive becomes aware that personal data relating to a child has been processed without an appropriate legal basis, reasonable steps may be taken to delete or otherwise appropriately handle the relevant data.

18. Rights of Data Subjects

Under Article 11 of the Turkish Personal Data Protection Law No. 6698 and other applicable data protection laws, individuals may have the right to:

The availability and scope of these rights may depend on applicable law and the circumstances of the relevant processing activity.

19. Requests and Contact Information

For questions, requests, or applications relating to this Privacy Policy or the processing of your personal data, you may contact Golive.

GOLIVE YAZILIM HİZMETLERİ A.Ş

Address: Ataşehir, Erzincan Sk. No:26, 34758 Ataşehir/İstanbul

Email: [email protected]

Website: https://golive.com.tr

Requests will be evaluated and responded to in accordance with applicable legal requirements and statutory time periods.

20. Changes to This Privacy Policy

Golive may amend or update this Privacy Policy from time to time due to:

The most current version of this Privacy Policy will be made available through the Golive website and, where appropriate, through relevant applications or digital services.

Where required by applicable law or where changes are material, users may also be informed through appropriate communication channels.

Users are encouraged to review this Privacy Policy periodically.

21. Effective Date

This Privacy Policy is effective as of July 1, 2026.

This Privacy Policy is intended to serve as Golive's general privacy policy covering its websites, software products, web services, mobile applications, and other digital services.

GOLIVE YAZILIM HİZMETLERİ A.Ş

© Golive. All rights reserved.