Privacy policy
This policy explains how Korems ("Korems", "we") processes data about visitors to korems.com, people who contact us, and the social media accounts connected to our management panel.
Data controller
Korems. Questions: [email protected]
What we process
When you visit the site
- Server logs: IP address, browser details, page visited and time, kept for security and debugging.
- Essential cookies: session, security (CSRF) and language preference. We do not use advertising or third-party tracking cookies.
When you write to us
The name, organisation, email, phone number, budget range and message you enter in our forms. We use them only to reply and to run the business relationship.
Instagram accounts (Meta APIs)
Our team may connect Instagram professional accounts it is authorised to manage to our panel through Meta's official login screen. We then receive and store:
- the account ID, username, display name, profile picture, follower and media counts;
- an access token, stored encrypted, and the permissions granted;
- the account's media and the insights for those posts and for the account (reach, views, likes, comments, saves, shares);
- comments on posts, if that permission is granted.
We use this data only to publish content, manage the publishing calendar and measure results for that account. We do not sell it, use it for ad targeting or share it with third parties without the account owner's permission.
Panel users
We keep our team members' names, emails and an activity log of panel actions for security.
Legal bases
We process data to enter into or perform a contract, to meet legal obligations, for our legitimate interests where these do not override your rights, and with your consent where required (Turkish Law No. 6698 Art. 5; GDPR Art. 6 for users in the EEA).
Who we share it with
- Hosting and email providers, to run the site and our email.
- Meta Platforms, to publish to and measure connected accounts, under Meta's own terms.
- Our AI provider (Anthropic): only topics and draft text are sent when preparing content drafts, never visitor or form data.
- Authorities, where the law requires it.
Some of these providers process data outside Türkiye; such transfers follow Article 9 of Law No. 6698.
Retention
| Data | Period |
|---|---|
| Form messages | 2 years after the last exchange |
| Server logs | Up to 6 months |
| Instagram access token | Until the connection is removed or the token expires |
| Post and account insights | While we manage the account, and up to 1 year after |
Your rights
You can ask whether we process your data, request access, correction or deletion, learn who it was shared with, and object. Write to [email protected]; we reply within 30 days. For deletion steps see the data deletion page.
Children
The site is not directed at children under 13 and we do not knowingly collect their data.
Changes
When we update this policy we change the date at the top of the page and announce significant changes on the site.