Owlena
EN
EnglishENDeutschDEEspañolESFrançaisFRTürkçeTRالعربيةAR

Privacy Notice

Last updated: 2026-10-21

This notice explains how Owlena (“Owlena”, “we”) processes personal data, in line with Türkiye's Personal Data Protection Law No. 6698 (“KVKK”) and, where it applies, the EU GDPR.

1. Who is responsible

The data controller is Owlena. You can reach us via our contact form.

2. What we collect

  • Demo and contact requests: name, company, phone, email, industry, channels you're interested in and your message.
  • Account data: company name, your name, email and a one-way hash of your password.
  • Usage and security logs: IP address (stored as a one-way hash to prevent abuse), browser details, session cookie and activity logs.
  • Analytics: pages visited, clicks and on-page behaviour (see the Cookie Policy).

3. Our customers' conversation data

For conversations the assistant handles on behalf of businesses that use Owlena (calls, messages, website chat), that business is the controller and Owlena acts as its processor, following its instructions. For those conversations, please contact the business first.

4. Purposes and legal bases

  • Replying to your demo request and preparing a quote: steps prior to a contract.
  • Creating your account and providing the service: performance of a contract.
  • Keeping the service secure and preventing abuse: legitimate interest and legal obligations.
  • Analysing and improving the site: legitimate interest; you can turn analytics off at any time via “Cookie preferences” at the bottom of each page.

5. Sharing and international transfers

We share data with the providers we need to run the service: hosting and database (Cloudflare), the voice and chat assistant (ElevenLabs) and analytics (Google Analytics, Microsoft Clarity). Some of their servers are outside Türkiye; transfers are made in line with KVKK Article 9 and, where required, on the basis of your consent or standard contracts. We may disclose data to authorities where the law requires it.

6. Retention

Demo requests are kept for up to 2 years, account data while the account is open and afterwards for legally required periods, and security logs for up to 1 year. Data is then deleted, destroyed or anonymised.

7. Your rights

You may ask whether we process your data, request information about it, learn its purpose and who it was shared with, ask for corrections, ask for deletion when the conditions are met, object to outcomes of purely automated analysis, and claim compensation for damage caused by unlawful processing.

Send requests via our contact form. We respond free of charge within 30 days.