Privacy Policy

Last updated: 27 September 2026

This policy explains how egob, LLC (2810 N Church St, Ste 90421, Wilmington, DE 19802, United States), the operator of kuruldu.com, collects, uses and protects your data. Cookies are described in the Cookie Policy. This English version applies to customers and visitors outside Türkiye and North Macedonia; for Türkiye the Turkish version and the statutory notice under the Turkish Personal Data Protection Law (KVKK) apply, and for North Macedonia the Macedonian version.

1. Data we collect

Information you give us directly (contact and information forms, order and invoicing details, support conversations, files you upload), the data needed to forward email if you use a MailDigi business address (section 5) and technical records generated automatically while you use the site (IP address, browser information, pages visited, login records).

2. How we use the data

• To process your order, deliver the setup and management services and run the customer panel.
• To issue invoices and keep statutory records.
• To send transactional notices (order confirmation, job status, invoice, login link).
• To keep the site secure, find errors and improve the service.
• With your explicit consent, to send newsletters and offers.

For customers in the European Union, the legal bases are the performance of the contract, our legal obligations, our legitimate interest in running and securing the service, and your consent where we ask for it (GDPR Art. 6(1)(b), (c), (f) and (a)).

3. Payment details

Payments are processed by Stripe. Your card number never reaches Kuruldu.com’s servers and is not stored by us. You use the customer portal provided by Stripe to manage your subscription and invoices. Stripe’s privacy practices: stripe.com/privacy.

4. Account access

For advertising and analytics services, accounts are opened in your name and remain your property. We only work with partner / manager access; we never ask for your password. When the agreement ends we remove our access.

5. Who we share your data with

With the infrastructure providers required to deliver the service: Stripe (payments), Cloudflare (hosting, database, file storage), Resend (transactional email), Google and Meta (only if you purchased the related service), Anthropic (MailDigi automatic translation — only if you turned the feature on), domain registrars, and our accounting and legal advisers. With competent authorities where legally required.

Your information is not shared with third parties for advertising or marketing purposes and is not used for commercial purposes; it is shared only with the providers we work with to deliver the service (payments, hosting, email, translation) and where required by law. If you use our ads management, your ad accounts are already held in your name at Meta and Google.

MailDigi business address (website packages and extra addresses): If you use this feature, we store the personal address that incoming email is forwarded to. We process forwarded and replied emails only momentarily to deliver them (on Cloudflare’s infrastructure); we do not store their content. There are two exceptions: if sending fails, the email is kept encrypted for at most 72 hours and retried, then deleted; for emails larger than 5 MB with attachments, the attachments are stored encrypted for 14 days and offered through a download link in the email, then deleted. Forwarded emails are sent from relay@maildigi.com and download links are served from maildigi.com; maildigi is the email relay service of egob, LLC, the company that runs Kuruldu.com. To route your replies to the right person, we keep the email addresses and names of people who write to you while your address is open and for 90 days after it closes. Processing records (time, size, result; no content or addresses) are kept for 30 days. The request and approval history is kept in your account for support and abuse review. When the address is closed, the Cloudflare rule and (unless another address uses it) your domain’s sending setup are removed.

MailDigi Panel (new emails from your business address): We process emails you send from MailDigi Panel only momentarily to deliver them; we do not store their content, and a copy of each sent email goes to your personal address. For emails larger than 5 MB with attachments, the attachments are stored encrypted for 14 days and offered through a download link, then deleted, as with incoming emails. MailDigi Panel keeps an address book for each business address containing only the email addresses and display names (and a usage count) of (a) recipients you sent to from MailDigi Panel and (b) people who wrote to your business address and can be replied to; no email content is stored. You can delete entries one by one; entries unused for 12 months are deleted automatically, and all entries and the signature are deleted when the business address is closed. The signature you save for a business address is kept until you change or remove it or the address is closed. MailDigi Panel send logs (time, result, recipient count; no content) are kept for 30 days.

MailDigi automatic translation (optional): This feature is off by default; it is turned on for each business address in the customer panel with your explicit consent. When it is on, the text (subject and newly written text; quoted earlier conversation is excluded) of incoming emails in a foreign language, of your and your team members’ replies and of new emails for which you choose "Translate to" in MailDigi Panel is sent via API to Anthropic, PBC (USA; Claude model) to be translated. This means that the email text of third parties who write to you is also processed for translation. We do not store translations; we log only the language, character count, cost/token counts, duration and result (no content, no addresses). For translation, the text of the email is sent to Anthropic; this text is not used to train AI models and is deleted within 30 days at the latest. If a translation fails, the email is delivered in its original language with a note.

MailDigi team (shared address): If the account holder adds team members to a business address, we process each member’s email address and nickname (entered by the account holder), invitation and confirmation times, notification preference and delivery errors. Purpose: delivering copies of incoming emails to the member, authorising the member’s replies from the business address and MailDigi Panel sign-in, and team coordination (assignments, status notices, reminders). Legal basis: performance of the contract with the account holder and our legitimate interest; a member joins only after confirming through the link sent to their own address. Member records are kept while the membership lasts; records of removed members are deleted 90 days after removal, and unconfirmed invitations after 7 days. Conversation tracking (only on addresses with a team): a shortened subject (at most 120 characters), the correspondent’s address and name, and assignment, reply and status events are kept; email content is not stored. These records are deleted 90 days after the last activity. Copies and notices are sent through our email infrastructure, Cloudflare, listed above; there is no new sub-processor for the team feature.

egob, LLC is established in the United States, and your data is processed by us and by providers we work with in the United States and the EU. Transfers from the EU/EEA rely on the safeguards in each provider’s data processing terms (the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses); you can request details and a copy at contact@kuruldu.com.

6. Where data is stored and security

Our servers run on Cloudflare’s global network; data is transferred over encrypted connections (HTTPS). Login to the customer panel uses a one-time link sent to your email instead of a password. Access to administrative interfaces is limited by authentication; access logs are kept.

7. Retention

Account and service data are kept for the duration of the agreement. Invoices, payment and order records are kept after the agreement ends for as long as tax and accounting rules require; consent records are kept for as long as claims arising from the related contract may legally be brought. The data is then deleted or anonymised. The shorter retention periods for MailDigi business addresses are set out in section 5.

8. Your rights

Where we rely on your consent (for example newsletters) you can withdraw it at any time without affecting earlier processing. Your name, email and billing details are needed for the contract; without them we cannot complete the order. We do not make decisions about you based solely on automated processing.

You have the right to access, correct and delete your data, to object to processing, to restrict processing and to receive your data in a portable format, subject to the law applicable to you. For requests write to contact@kuruldu.com. Customers in the EU may also lodge a complaint with their supervisory authority. MailDigi team members have the same rights, and they can leave the team themselves through the link in any status email.

9. Children

Our services are intended for persons aged 18 or over; we do not knowingly collect data from persons under 18.

10. Changes

This policy may be updated; the current version is published on this page. We notify material changes to your registered email address.