KVKK Data Privacy Disclosure

Last Updated: 22/04/2026

1. Identity of the Data Controller

In accordance with the Law on Protection of Personal Data No. 6698 ("KVKK"), your personal data will be collected and processed by Xpensio Yazılım A.Ş. ("Company") as the data controller within the scope described below.

2. Purposes of Processing Personal Data

Your collected personal data may be processed for the following purposes within the conditions of personal data processing specified in Articles 5 and 6 of the Law:

• Conducting the necessary work by our business units so that you can benefit from the products and services offered by our Company,
• Ensuring legal, technical, and commercial business security of the relevant persons in a business relationship with our Company,
• Analyzing and verifying OCR and receipt scanning operations within the application on our systems.

3. Transfer of Personal Data

Personal data belonging to our customers may be transferred to our business partners (SAP and other integration companies), suppliers, and legally authorized public institutions for the purpose of carrying out our company activities, in accordance with the conditions specified in Articles 8 and 9 of KVKK.

4. Your Rights Under Article 11 of KVKK

As personal data subjects, you may submit your requests regarding your rights within the scope of Article 11 of KVKK, together with identity-verifying documents, to: kvkk@xpensioapp.com