This text was prepared to fulfill our disclosure obligations under the Personal Data Protection Law No. 6698 (PDPL). This text is updated as new features are added to the platform.
Last update: 28.07.2026
1. Data Controller
BOZFIX is a platform that connects customers with service providers (pros, businesses, couriers). The platform does not charge fees or mediate payments between parties.
2. Data We Process and Its Purposes
- Membership data: Full name, phone number (can be verified via SMS), email (for Google login). Purpose: account creation, security, and communication between parties. Your password is stored irreversibly (bcrypt) — plain text password is not kept.
- Request and job data: breakdown description, province/district, address, photos if available, and appointment details. Purpose: to match your request with the right pros and execute the job. Your address is shown only to the service provider whose offer you accept.
- Live location (consent only): When the pro is on the way, location sharing is requested with your explicit consent; sharing stops when the job is done. You can always refuse.
- Photo Analysis (AI): When you upload a fault photo (request form or Bozo chat), the photo is sent to our AI service provider for diagnosis. This transmission may involve transferring data abroad and is carried out at your request (explicit consent). If the photo is attached to your request, it will be shown to service providers who will offer a quote.
- Bozo chat assistant: Chat messages are sent to our AI service provider for response generation (may include data transfer abroad) and recorded for service quality. A copy of the chat history is kept only on your device (browser storage).
- Voice / free text request completion: free text you entered in the request form under "tell me what you need, I'll fill it in" or spoke via microphone is sent ONLY to our AI service provider for the purpose of filling in the form for you (category/district/description suggestion) and may involve overseas transfer. BEFORE sending, direct contact/identity information such as phone number, ID number and email in the text are automatically hidden (masked). The AI only SUGGESTS; no field is sent without your approval. In voice input, converting speech to text is done by the browser's own voice service (in Chrome this service may go to Google).
- Bozo Memory: Practical information from your conversations (district, home type, appliances, pets) can be saved to personalize your experience. It's completely transparent: from the Panel → "What Bozo Knows About Me" screen, you can view every record, delete individual ones or all of them.
- Reviews and comments: Your rating, review, and photos (if added) after the job will be published with an abbreviated version of your name so other users can make informed choices.
- Home inventory and device inventory: Your registered property, device and maintenance information is processed only to serve you (reminders, health score, history).
- Safety records: IP address, session and audit logs are kept within the scope of legitimate interest to prevent abuse, fraud and attacks. Messages containing insults or profanity in chats are recorded; these records may serve as a basis for account restrictions and can be presented as evidence in case of legal requests.
- Contract approval records: When you approve relevant agreements (e.g. distance sales, pre-information, terms of use, data protection, service fee, campaign terms) in an order, request or campaign application; the document VERSION and content summary (hash) at the moment of approval, approval time and your IP address are recorded. Purpose: proof of which text you approved and when (legal obligation + legitimate interest). If the text is updated later, the old approval does not cover the new text; the record shows the version at that time.
- Notifications: SMS verification codes and (if you allow) browser notifications; used to notify you about your request status. Notification permission can be revoked from your browser at any time. Also, the system can send you and the relevant pro automatic status reminders when a process gets stuck (e.g., you haven't responded to pending offers for a while); these reminders are generated only with in-platform process data and done once per request. Messages are also automatically scanned against fraud patterns (e.g. requesting deposits/IBAN before work) using keyword rules alone; on match a protection notice is shown to the other party and the record falls to authorized review — message contents are not read for other purposes. If you experience poor service (e.g., pro not showing up) the system may automatically send you a compensation gesture — platform points and an apology — generated solely from platform job record data, once per job. Neighbor discovery is completely optional: unless you join, no one can see you in the list; if you join, only your name and district are visible — your address and contact details are not shared; connections require two-way approval and you can leave discovery anytime.
- Phone verification (Google Firebase): If you choose to verify your phone number with the "Verify with Google SMS" option, your number will be sent to Google Firebase Authentication service for verification SMS delivery — this involves data transfer abroad and only occurs with your explicit consent by selecting this option. Google is subject to its own privacy policy in this process. The traditional SMS verification method remains always available as an option; you are not required to use Google's method.
- Usage experience signals: Completely ANONYMOUS usage signals are collected to improve the platform: friction points like repeatedly tapping a button in frustration or starting to fill out a form but leaving without submitting. Only the page address, the type of element clicked, and the repeat count are recorded; no values YOU ENTER in the form (name, phone, message, etc.) are read or sent. This data is not linked to your identity and is not shared with third parties.
- Cookies: only essential cookies for your session to work are used; no third-party advertising{/}tracking cookies are used.
3. Who is it shared with?
Your data is not sold. It is shared only with: (a) service providers matched to your request, limited to what's needed to fulfill the job (description, district, photo, address/phone after acceptance), (b) infrastructure providers like AI and SMS services, limited to what's needed for the service to work, (c) authorities in case of legal obligation. Your phone number is hidden from the pro until you accept their offer.
4. Storage Duration
Data is retained for the duration of membership and legal retention obligations (e.g., records under Law No. 6563); after the period expires, it is deleted or anonymized.
5. Rights Under KVKK (Article 11)
You have the right to access, correct, delete (be forgotten), object to processing, and learn about recipients of your data. For Bozo's memory, you can use the deletion right immediately from the panel yourself; for other requests, reach us from the contact page — applications will be answered within 30 days.
Contact for KVKK Application →
← Back to Home