Privacy Policy
Last updated: April 30, 2026
At API Deposu, we value your privacy. This policy explains how your personal data is collected, used, and protected in accordance with the Turkish Personal Data Protection Law (KVKK, Law No. 6698).
1. Data Controller
API Deposu is the data controller for your personal data. Contact: iletisim@apideposu.com
2. Data Collected
The following data may be automatically collected during your site visits: • IP address (anonymized) • Browser type and version • Pages visited and duration • Referral source • Device information Additionally, data may be collected through the following forms and product flows: • API submission: API name, provider, URLs, contact information (name, email — optional) • Feedback form: email (optional), message content • Portal/marketplace and first-party API products: account identity, selected plan, subscription records, API key prefix information, and usage metadata such as endpoint path, method, status, HTTP status, and latency
3. Purposes of Data Processing
Collected data is processed for the following purposes: • Improving site performance and user experience • Analyzing visitor statistics • Detecting and fixing technical issues • Ensuring site security • Evaluating API submissions • Operating subscriptions, quotas, rate limits, and abuse controls
4. Legal Basis
Your data is processed based on the following legal grounds under Article 5 of KVKK: • Data processing is necessary for our legitimate interests • Data processing is necessary for the establishment, exercise, or protection of a right • Explicit consent of the data subject (for analytics cookies)
5. Third-Party Services
The following third-party services are used: • **Vercel Analytics:** Collects site usage statistics when user consent is given. Data is processed under Vercel's privacy policy. • **OpenAI API:** Used for automatic Turkish/English translation in API submissions. Text content is sent to OpenAI servers. • **Cloudflare R2:** Used for storing large collection JSON files. Your personal data is not sold or shared for advertising purposes.
6. Data Retention Period
Analytics data is stored for a reasonable period for statistical purposes (typically 26 months). Anonymized data may be retained indefinitely. For first-party API products, operational records such as subscriptions, API key prefixes, and usage metadata may be retained for a reasonable operational/legal period for billing, quota tracking, security review, and abuse detection. Request bodies are not stored as usage events.
7. Your Rights (KVKK Article 11)
Under KVKK, you have the following rights: • Learn whether your personal data is being processed • Request information if it has been processed • Learn the purpose of processing and whether data is used in accordance with its purpose • Know third parties to whom data is transferred domestically or abroad • Request correction of incomplete or incorrect data • Request deletion or destruction of data • Request notification of correction/deletion to third parties • Object to outcomes arising from automated analysis • Claim compensation for damages due to unlawful processing
8. Applications
To exercise your rights, you can email us at iletisim@apideposu.com. Your application will be evaluated within 30 days at the latest.