Privacy Policy

1. Scope

This Privacy Policy explains the information collected, and how it is processed, when using the https://mila.cx marketing site, control panel, API, and the e-mail infrastructure behind these services, all operated by VENNYX YAZILIM DANIŞMANLIK A.Ş..

2. Account and Organization Information

We collect the information you provide directly to create and operate your account: your name, an e-mail address for sign-in and notifications, your organization information, and the domains you configure. This is the minimum information required to verify you and route mail correctly.

3. E-mail Content and Metadata

The e-mails you send and receive through Mila are stored so that your mailboxes function -- this is the Service itself. We do not read, scan, or use e-mail content for advertising purposes; we do not sell e-mail content or metadata to third parties.

E-mail metadata (sender/recipient addresses, timestamps, delivery status, and similar routing information) is processed to the extent necessary to deliver mail, apply the spam filtering and rules you have configured, and diagnose delivery issues you report.

4. Operational and Diagnostic Data

To keep the Service secure and reliable, and to help troubleshoot issues with your domain or mailboxes together with you, we log server activity (connection attempts, authentication events, DNS check results, API requests). These logs are retained only for as long as necessary for these purposes.

5. Payment Information

Payments are collected via iyzico's infrastructure; your card information is never stored by the SELLER, and is processed directly on iyzico's PCI-DSS compliant systems. Your invoicing information is transferred to the paraşüt integration for the purpose of issuing e-invoice/e-archive documents.

6. Parties With Whom Data Is Shared

We share data only with the infrastructure providers and processors necessary to run Mila (for example, hosting, payment, and billing providers) -- each of which is obligated to protect the data -- and when legally required to do so. We do not sell your data or your e-mail content to anyone.

7. Data Retention and Deletion

Account, domain, and mailbox data is retained for as long as your account and the relevant domain remain active. When you delete a domain, mailbox, or account, the related data is removed within a reasonable time -- except where we are required to retain limited records for legal, security, or billing purposes.

8. Data Security

We apply reasonable technical and administrative measures -- including access control, encryption, and regular security reviews -- to protect your personal data and e-mail content.

9. Your Rights

You can access, export, and delete most of your account and mailbox data directly from the control panel. For a data request the panel does not yet support, you can contact us at destek@mila.cx. For your rights under the KVKK, please also see the "Privacy Notice."

10. Changes to This Policy

We may update this policy as the Mila service evolves. Material changes will be published here together with an updated effective date.