Privacy Notice

This is a plain language notice. It tells you what the rigipo.com website does with personal data today. Early access opens soon, so we may update these terms before the public launch.

Last updated: 7 August 2026

Who we are

RIGIPO is an independent software project. Serhat Akgül runs it as a sole founder in Türkiye. He is the data controller (veri sorumlusu) for the personal data that rigipo.com collects. Two laws apply: the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).

  • Brand: RIGIPO
  • Data controller: Serhat Akgül, Türkiye
  • Website: rigipo.com
  • Contact for all privacy questions and requests: [email protected]

What this notice covers

This notice covers the rigipo.com website only. The site has no user accounts. The site has no checkout. The site has no user content. The site collects three things: waitlist signups, click and download events, and server logs. This notice describes all three.

Where the site runs

The website runs on a dedicated server. Hetzner Online GmbH operates that server. The server is in Germany, inside the European Union. Cloudflare Inc. provides DNS, CDN and security protection in front of the server. Your requests pass through Cloudflare before they reach the server. Cloudflare therefore processes technical request data, for example your IP address.

Waitlist signup

You can join the waitlist in two ways.

  • You type your email address. We store the address that you type.
  • You select “Continue with Google”. Google then gives us your verified email address and your basic profile name. We do not receive your Google password. We do not receive your contacts. We do not receive any other data from your Google account.

We store these fields for each signup.

Data Why we store it
Email address To identify your place on the waitlist, and to send you the confirmation email and the launch email later
Name (only if you used Google sign in) To address you correctly in the launch email
Signup time Proof of when you gave your consent
The exact consent text and its version Proof of what you agreed to
Confirmation status To show whether you confirmed your signup
Traffic source (referrer or utm parameter) To see which page or link brought you to the site
IP address Proof of consent, and protection against fake and automated signups
Browser user agent Proof of consent, and protection against fake and automated signups

Email sending is not active yet. We store the signups now. We will send the confirmation email later. We will send the launch email later.

Click and download events

Two actions on the site record an event. The first is a click on a link to the Fab store. The second is a download of the Rigipo Bench program. The site then records:

  • the time of the action,
  • which link you used,
  • your IP address,
  • your browser user agent,
  • the page that you came from.

We use this data for two purposes. We measure interest in the products. We protect the site against abuse and against automated download attacks.

We do not use this data to build advertising profiles. We do not sell it. We do not give it to advertisers.

Server logs

The server keeps standard technical logs. These logs help us to find faults and to keep the site secure. We keep them for a short period. Then we delete them.

Legal basis

  • Waitlist signup: your explicit consent. KVKK calls this açık rıza (Article 5). The GDPR calls this Article 6(1)(a). You are never required to join the waitlist. Nothing else on the site depends on it.
  • Click and download events: legitimate interest. This is GDPR Article 6(1)(f) and the equivalent ground in KVKK Article 5. Our interest is to measure interest in the products and to keep the site safe. We keep the amount of data small.
  • Server logs: legitimate interest in the security of the site.

Who we share it with

We do not sell your personal data. We do not rent it. We do not trade it. We use a small number of service providers to operate the site.

  • Hetzner Online GmbH, Germany. Hetzner operates the dedicated server that holds the site and its data.
  • Cloudflare Inc. Cloudflare provides DNS, CDN and security protection. It processes request data such as your IP address.
  • Google. Google is involved only if you select “Continue with Google”. Google then acts as the identity provider. The privacy policy of Google applies to that sign in.

We may also disclose data when the law requires it. One example is a valid request from a competent authority.

International transfers

Your data is processed in Germany, inside the European Union. The data controller is in Türkiye. A transfer from Türkiye to Germany is therefore a cross border transfer under KVKK Article 9. Cloudflare operates a global network, so Cloudflare can process request data outside the European Union.

We use these safeguards.

  • Under KVKK: we make the transfer on the basis of Article 9. We rely on your explicit consent and on the transfer methods that Turkish law permits.
  • Under the GDPR: the server is inside the European Union, so it needs no extra transfer mechanism. For any processing outside the European Economic Area, we rely on the safeguards in Chapter V. One example is the Standard Contractual Clauses of the European Commission. An adequacy decision applies where one is in force for the receiving country.
  • In every case: written contracts bind our providers. They must protect the data. They must process it on our instructions only.

How long we keep it

  • Waitlist records: we keep them until you unsubscribe, or until the purpose of the waitlist ends.
  • Consent records: we keep the signup time, the consent text, the consent version, the IP address and the user agent for as long as we need them to prove your consent. Then we delete them.
  • Click and download events: we keep them for a maximum of 12 months.
  • Server logs: we keep them for a short period for security.

Commercial electronic messages in Türkiye

Law No. 6563 controls commercial electronic messages in Türkiye. We follow that law for recipients in Türkiye. We record and manage the approvals and the opt-outs through İYS (İleti Yönetim Sistemi). İYS is the national message management system. You can withdraw your approval through İYS. You can also withdraw it by email to [email protected]. When email sending starts, every message will also contain an unsubscribe link.

Cookies

The site uses no advertising cookies. The site uses no third party tracking cookies. We do not use Google Analytics. The Cookie Notice gives the full detail.

Security

We protect this data with technical and organisational measures. We use encrypted connections (HTTPS). We limit who can reach the database. We collect only the data that we need. No system is perfectly secure. For that reason we keep the amount of data deliberately small.

Your rights

Under KVKK Article 11, you have the right to:

  • learn whether we process your personal data;
  • request information about that processing;
  • learn the purpose of the processing, and learn whether we use the data for that purpose;
  • know the third parties, in Türkiye or abroad, that receive your data;
  • request correction of data that is incomplete or wrong, and request that we tell those third parties about the correction;
  • request erasure or destruction of your data when the conditions for processing no longer apply, and request that we tell those third parties about it;
  • object to a result that comes only from automated analysis of your data and that is to your detriment;
  • claim compensation for damage that unlawful processing causes.

Under the GDPR, you also have the right to:

  • access your personal data and receive a copy of it;
  • have wrong data corrected;
  • have your data erased;
  • restrict the processing in some situations;
  • receive your data in a portable, machine readable format;
  • object to the processing, including the processing of click and download events that we base on legitimate interest;
  • withdraw your consent at any time. A withdrawal does not affect the processing that we did before it;
  • complain to a supervisory authority. This is the Turkish Personal Data Protection Authority (KVKK Kurumu), or the data protection authority of the country where you live.

How to use your rights

Send an email to [email protected]. Tell us what you want. We answer within the time limits that KVKK and the GDPR set. We may first need to confirm that the request comes from the owner of the email address.

To withdraw your consent is as easy as to give it. You do not have to give a reason. There is no penalty.

Children

The rigipo.com website is not directed at children under 16. We do not knowingly collect personal data from them. If you believe that a child under 16 has signed up, send an email to [email protected]. We will delete the record.

Changes to this notice

Early access opens soon. When the product launches and gains features such as user accounts, we will update this notice to describe the new processing. For a material change, we will update the “Last updated” date above. If the change affects data that we already hold about you, we will tell you by email.

Contact

Questions, requests or complaints about this notice: [email protected]