Skip to content
Tomrin

Privacy Policy

Last updated: October 23, 2026

This Privacy Policy explains how Softcaveware (“Company”, “we”, “us”) collects, uses and protects your personal data when you use Tomrin Merchant, the mobile management app for the Tomrin e-commerce infrastructure platform (iOS and Android), and the tomrin.com website. We process personal data in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where applicable, the EU General Data Protection Regulation (“GDPR”).

1. Data controller

The data controller is Softcaveware. For any question about this policy, contact us at info@softcaveware.com.

2. Data we collect

  • Account information: your name and email address, used to create your merchant account and sign you in.
  • Push notification token: a device token issued by Apple Push Notification Service (APNs) or Firebase Cloud Messaging (FCM) so we can deliver notifications such as new orders to your device.
  • Device information: technical details such as device model, operating system version, app version and language preference, used for compatibility, troubleshooting and multi-device support.

3. Data we do not collect

  • We do not collect location data.
  • We do not collect or store payment or card data.
  • We do not use any analytics or advertising SDK in the app, and we do not track you across apps or websites.

4. How we use data and legal bases

  • To create your account, authenticate you and provide the service (performance of a contract).
  • To send order and store notifications (performance of a contract; you can turn notifications off in your device settings at any time).
  • To keep the service secure, fix bugs and respond to support requests (legitimate interests).
  • To comply with our legal obligations.

5. Sharing

We do not sell or rent your personal data. We share it only with service providers needed to run the service: our hosting and infrastructure providers, and Apple (APNs) and Google (FCM) for notification delivery. Some of these providers may be located outside Türkiye; in that case transfers are made with safeguards required by KVKK Article 9 and, where applicable, the GDPR. We may also disclose data to competent authorities where required by law.

6. Retention

We keep your data for as long as your account is active. When you delete your account, your data is deleted or anonymised within 30 days, subject to any statutory retention obligations. Push tokens are invalidated when you sign out or change devices.

7. Security

Data is encrypted in transit with TLS and stored on systems with access restricted to authorised personnel. No method is 100% secure, but we apply reasonable technical and organisational measures to protect your data.

8. Your rights

Under KVKK Article 11 and the GDPR you have the right to:

  • learn whether your data is processed and request information about it,
  • request correction of incomplete or inaccurate data,
  • request erasure of your data,
  • object to processing and learn which third parties your data was shared with,
  • lodge a complaint with the Turkish Personal Data Protection Authority or your local supervisory authority.

Send requests to info@softcaveware.com. We respond within 30 days.

9. Account deletion

To delete your account and associated data, email info@softcaveware.com from your registered address with the subject “Account deletion request”.

10. Children’s privacy

Tomrin Merchant is a business app and is not directed at anyone under 18. We do not knowingly collect personal data from children.

11. Changes

We may update this policy from time to time. We will notify you of material changes in the app or by email. The current version is always published on this page.

12. Contact

Softcaveware — info@softcaveware.com